Security Technician - SOC Analyst

Job description

**Job Description** - Investigate complex security incidents escalated from L1 - Perform detailed log analysis using KQL in Microsoft Sentinel - Correlate events across Defender XDR, Azure AD/Entra ID, M365, endpoints, and network sources - Identify true positives, scope of compromise, and attack patterns - Support containment actions (account disablement, endpoint isolation, token revocation, etc.) - Conduct threat hunting activities - Tune and optimize analytics rules to reduce false positives - Maintain clear investigation documentation in ticketing systems - Participate in incident reviews and continuous improvement initiatives **Required Technical Skills** - 58 years of SOC experience - Minimum 5 years hands-on experience inSOC/ Microsoft Sentinel - Strong knowledge of KQL (Kusto Query Language) - Experience with log analysis (Windows, Azure, M365, firewall, proxy, EDR) - Understanding of Microsoft Defender XDR ecosystem - Knowledge of Azure AD / Entra ID security events - Familiarity with MITRE ATT&CK framework - Understanding of phishing, malware, lateral movement, and account compromise scenarios - Experience with incident response processes - Strong analytical and investigation skills - Ability to determine attack scope and impact - Clear and structured documentation ability - Ability to work in 24x7 shift model **Certifications (Preferred)** - Microsoft SC-200 (Security Operations Analyst) - Microsoft AZ-500 (Azure Security Engineer) - CompTIA Security+ - CEH (Certified Ethical Hacker) - ECIH ( Incident Handler)