Azure Sentinel SIEM Engineer I

Azure Sentinel SIEM Engineer I

Location: Remote in the United Kingdom

BlueVoyant Deployment Services is currently seeking an Azure Sentinel SIEM Engineer I. Candidate will be a subject matter expert in Azure Cloud security technologies and SIEM platforms, performing SIEM deployments in customer environments, leading technical investigations for security incidents, overseeing process improvements, development of new SIEM use cases and driving implementation of new capabilities. 

Responsibilities:

• Work on Cloud SIEM project implementations for various customers in various parts of the world (remotely), starting with deployment, use case tune-up and day-2 SOC operations.
• Work with Managed Sentinel Lead Architects and other security partners to develop and tune-up correlation rules
• Perform investigation and escalation for complex or high severity security threats or incidents
• Coordinate evidence/data gathering and documentation and review Security Incident reports
• Create and develop new SOC SIEM use cases as per the customer requirements
• Define and assist in the creation of operational and executive security reports and dashboards

Qualifications:

• At least 1 year of technical experience in cybersecurity field
• Strong experience with Azure Cloud technologies
• Expert level in script development, preferably KQL scripts
• Detailed practical knowledge of Internet protocols, firewalls, and intrusion detection/prevention systems. 
• Ability to conduct multi-step breach and investigative analysis to trace the dynamic activities associated with advanced threats. 
• Advanced knowledge and expertise of using SIEM technologies for event investigation. 
• Customer facing, strong communication skills

Preferred Competencies:

• Advanced event analysis leveraging Azure Sentinel SIEM
• Solid knowledge of M365 security toolsets 
• Strong expertise in Kusto Query Language
• Expertise in Azure Logic Apps, Microsoft Flow
• Advanced incident investigation and response skill set
• Advanced log parsing and analysis skill set
• Proficient in Python, PowerShell or C#/.NET
• Proficient in Linux configuration and common administration tasks
• Proficient in English 

About BlueVoyant

At BlueVoyant, we recognize that effective cyber security requires active prevention and defense across both your organization and supply chain. Our proprietary data, analytics, and technology, coupled with deep expertise, works as a force multiplier to secure your full ecosystem. Accuracy! Actionability! Timeliness! Scalability!

Led by CEO, Jim Rosenthal, BlueVoyant’s highly skilled team includes former government cyber officials with extensive frontline experience in responding to advanced cyber threats on behalf of the National Security Agency, Federal Bureau of Investigation, Unit 8200, and GCHQ, together with private sector experts. BlueVoyant services utilize large real-time datasets with industry leading analytics and technologies.

Founded in 2017 by Fortune 500 executives, including Executive Chairman, Tom Glocer, and former Government cyber officials, BlueVoyant is headquartered in New York City and has offices in Maryland, Tel Aviv, San Francisco, London, Budapest, and Latin America.

All employees must be authorized to work in the United Kingdom. BlueVoyant provides equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability or genetics. In addition to federal law requirements, BlueVoyant complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities.