Senior SOC Analyst - onsite Lawrenceville, GA
Novalink Solutions LLC
5d•Onsite
About The Position
An ideal candidate will have experience in the Microsoft security products since that’s what we’re using for now/ MS Defender MS Entra ID On-premises Active Directory
Requirements
- Microsoft Defender for Identity (Threat Explorer, Tenant Block/Allow Lists, Incidents and Alerts, etc) - 3 Years Required
- Microsoft Active Directory - 3 Years Required
- Microsoft Entra ID (formerly Azure Active Directory) - 3 Years Required
- MS Sentinel (SIEM, and Investigations ) - 2 Years Required
Nice To Haves
- Knowledge in Defender Kusto Query Language - 1 Years Highly desired
Responsibilities
- Monitoring and remediating security alerts from Sentinel and Defender
- Helping develop Sentinel workflows/workbooks for automating response
- Utilizing MS Threat Explorer and Advanced Hunting for investigations
- Configuring Exchange transport rules with respect to security events
- Configuring Defender Tenant Block/Allow lists
- Providing forensic data for future investigations
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
Upload and Match Resume
What This Job Offers
Career Level
Mid Level
Education Level
No Education Listed
