Your key responsibilities
- Architecting and implementation of cloud security monitoring platforms MS Sentinel
- Provide consulting to customers during the testing, evaluation, pilot, production, and training phases to ensure a successful deployment.
- Perform as the subject matter expert on Cloud Security solutions for the customer, use the capabilities of the solution in the daily operational work for the end customer.
- Securing overall cloud environments by applying cybersecurity tools and best practices
- Advise customers on best practices and use cases on how to use this solution to achieve customer end state requirements.
- Content development which includes developing process for automated security event monitoring and alerting along with corresponding event response plans for systems
Skills and attributes for success
- Customer Service oriented - Meets commitments to customers; Seeks feedback from customers to identify improvement opportunities.
- Expertise in content management in MS Sentinel
- Good knowledge in threat modelling. Experience in creating use cases under Cyber kill chain and Mitre attack framework
- Expertise in integrating critical devices/applications including unsupported (in-house built) by creating custom parsers
- Below mentioned experiences/expertise on Sentinel
- Develop a migration plan from Splunk/QRadar/LogRhythm to MS Sentinel
- Deep understanding of how to implement best practices for designing and securing Azure platform
- Experiencing advising on Microsoft Cloud Security capabilities across Azure platform
- Configure data digestion types and connectors
- Analytic design and configuration of the events and logs being digested
- Develop, automate, and orchestrate tasks(playbooks) with logic apps based on certain events
- Configure Sentinel Incidents, Workbooks, Hunt queries, Notebooks
- Experience in other cloud native security platforms like AWS and GCP is a plus
- Scripting knowledge (Python, Bash, PowerShell)
- Extensive knowledge of different security threats
- Good knowledge and experience in Security Monitoring
- Good knowledge and experience in Cyber Incident Response
- Languages: German C1 or above
To qualify for the role, you must have
- B. Tech./ B.E. with sound technical skills
- Strong command on verbal and written English language.
- Demonstrate both technical acumen and critical thinking abilities.
- Strong interpersonal and presentation skills.
- Certification in Azure (any other cloud vendor certification is a plus)
Ideally, you’ll also have
- People/Project management skills.
In EY GDS Spain, you will collaborate with our teams on exciting projects and work with well-known brands from across the globe. We’ll introduce you to an ever-expanding ecosystem of people, learning, skills, and insights that will stay with you throughout your career.
- Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next.
- Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.
- Transformative leadership: We’ll give you the insights, coaching, and confidence to be the leader the world needs.
- Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.