Build use cases and configure security tools and technologies (e.g. SIEM, xDR) to detect security events and potential incidents * Participate in Security Operations & alert monitoring: conducting incident assessments, determine impact and root causes, provide reports and recommendations * Configure and manage Microsoft Sentinel, including data connectors, KQL queries, analytics rules, workbooks, log sources * Security Certifications are an advantage (CISSP, SANS 450+ , Blue Team LVL x, OSCP, etc) * Advanced knowledge of security monitoring methodologies
mehr