TC-CS-Cyber Detection and Response-Sentinel-Senior

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

Job Description for MS Sentinel Consultant:

Key Capabilities:

• Should have experience in designing the deployment architecture for MS Sentinel
• Capable of supporting customer requirements in multi-tenant environments
• Previous experience in administration and management of SIEM related activities using MS Sentinel
• Experience on SIEM migration from an existing SIEM tool to Azure Sentinel
• Should have experience developing SOAR playbooks using Logic Apps
• Be able to perform maturity assessment of an existing MS Sentinel environment
• Hold productive discussions with the client to gather requirements
• Act as a security consultant to provide solutions to clients using MS Sentinel
• Should have in depth knowledge of MS Sentinel concepts and its functionalities.
• Should have strong hands-on experience in:
  • A. Installation, administration and troubleshooting of OMS/AMA agent.
  • B. Use case creation using KQL
  • C. Configuration of Analytic Rules
  • D. Developing workbooks, SOAR playbooks and notebooks
  • E. Log integration with different sources both cloud and on-prem
  • F. Custom parser development
• Supporting presales initiatives with regards to Microsoft Security such as answering RFPs, client presentations, demos.
• If required should be able to lead a team on deployment/migration activities.

Qualification & Experience:

• 5-7 years of experience in Cyber Security
• In depth experience in Microsoft Sentinel and Logic Apps SOAR

• Good to have knowledge of other MS Security Technologies like Microsoft 365 Defender and Defender for Cloud
• Capable of leading security projects as a consultant.
• Good business acumen to understand client requirements and build strong relationships.
• Strong oral, written and listening skills are an essential component to effective consulting.
• Certifications related to Azure and core security related discipline (CEH, Security+, etc.) will be an added advantage.

EY | Building a better working world

EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.

Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.

Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.