Soc Engineer - Microsoft Sentinel & KQL

Job Title: SOC Engineer

• Experience Required: 4 - 6 Years
• Employment Type: Full-Time, Permanent
• Department: Engineering - Software & QA / IT Security

Job Summary

We are seeking an experienced and technically sound SOC Engineer with 4 to 6 years of experience to join our Cybersecurity Operations team. The ideal candidate will serve as a subject matter expert for our SIEM environment, with strong hands-on experience in Microsoft Sentinel and KQL. You will be responsible for creating and maintaining security runbooks, managing alerts, and fine-tuning threat detection rules to maximize operational efficiency and drastically minimize false positives.

Key Responsibilities

• SIEM Management & Optimization: Administer, manage, and continuously optimize the enterprise Microsoft Sentinel environment.
• Detection Engineering: Design, write, and implement complex queries using Kusto Query Language (KQL) to establish strong behavioral baselines and threat hunting rules.
• Runbook & Playbook Automation: Create, test, and update technical security runbooks alongside automated workflows (Logic Apps/Playbooks) to ensure prompt and unified incident responses.
• Alert Tuning & False Positive Reduction: Analyze alert trends and systematically fine-tune detection rules to minimize false positives, elevate alert fidelity, and enhance overall SOC productivity.

Required Candidate Profile

• Experience: Minimum 4 to 6 years of solid experience working within an enterprise Security Operations Center (SOC) or Threat Detection team.
• Education: B.E. / B.Tech / BCA / B.Sc in Computer Science, Information Technology.
• Core Skills: Deep, demonstrable expertise with Microsoft Sentinel and advanced query authoring via KQL.
• Process Skills: Proven experience creating and structuring operational security runbooks and standard operating procedures (SOPs).
• Technical Knowledge: Thorough domain knowledge of the Microsoft technology stack, cloud infrastructure security, network protocols, and attack frameworks.