Information Security Analyst

📋 Description

• Monitor alerts in Microsoft Sentinel, Defender XDR, Defender for Cloud.
• Triage alerts by severity, impact, and response actions.
• Differentiate false positives, benign activity, threats using playbooks.
• Continuously monitor cloud, identity, endpoint, and network telemetry.
• Investigate suspicious activity across Azure, Entra ID, Defender XDR.
• Correlate logs to establish timelines and root cause.

🎯 Requirements

• 1+ years in a SOC or related security role.
• Hands-on with SIEM platforms (Microsoft Sentinel preferred).
• Analyze logs from Azure/Entra ID, Defender (Endpoint, Cloud, Office 365), Windows/Linux.
• Network security tooling: firewalls, IDS/IPS, Defender for Cloud.
• Basic incident response processes.
• Strong analytical and investigative skills.