Senior Cybersecurity Consultant

Job Description

Experience  3-6 Years 

Role Overview 

The SOC L2 Engineer performs advanced investigations, incident analysis, threat correlation, containment recommendations, and detection engineering activities. The role is expected to contribute towards AI-driven SOC modernization initiatives and Sentinel content development. 

Key Responsibilities 

Conduct advanced incident investigations and correlation analysis. 

Perform severity assessment and impact analysis. 

Identify attack patterns across cloud and on-premise environments. 

Recommend containment and remediation actions. 

Execute root cause analysis and lessons learned activities. 

Build and tune Microsoft Sentinel detection use cases. 

Reduce false positives through detection optimization. 

Develop and maintain automation runbooks and playbooks. 

Collaborate with Threat Intelligence, Threat Hunting, DFIR, and DLP teams. 

Mentor SOC L1 analysts. 

Participate in major incident response activities. 

Job Description - Grade Specific

Technical Skills 

Microsoft Sentinel SIEM/SOAR 

Defender XDR 

Azure Monitor 

KQL 

Log Analytics 

MITRE ATT&CK 

Detection Engineering 

Incident Response 

Threat Correlation 

Cloud Security Monitoring 

AI & Automation Requirements 

Experience with Azure AI Foundry. 

Develop AI-assisted triage workflows. 

Build automated incident classification models. 

Design zero-touch response playbooks. 

Develop AI-powered investigation workflows. 

Implement GenAI-assisted analyst productivity use cases. 

Certifications (Preferred) 

GCIH 

GCDA 

AZ-500 

SC-200 

CEH