Sr Administrator (Support & Operations)

Chennai, Tamil Nadu

Job Summary

• *Job Summary:**

We are seeking a Level 2 Threat \& Incident Response Analyst with hands\-on experience in Microsoft Sentinel. The candidate will be responsible for monitoring security events, investigating incidents, and supporting response and containment activities in a SOC environment.

Key Responsibilities

• *Key Responsibilities:**

• Monitor and investigate alerts and incidents in Microsoft Sentinel
• Perform incident triage and validate alerts escalated from L1
• Conduct root cause analysis (RCA) for security incidents
• Analyze logs from identity, endpoint, network, and cloud environments
• Correlate events across multiple sources to identify threats
• Execute incident response actions such as containment and remediation
• Work with threat intelligence feeds to enrich investigations
• Assist in tuning analytics rules and reducing false positives
• Document incidents, findings, and response activities
• Support shift handovers and maintain SOC documentation

Skill Requirements

• *Required Skills:**

• Hands\-on experience with Microsoft Sentinel (SIEM)
• Understanding of incident response lifecycle
• Knowledge of log analysis and threat detection
• Familiarity with MITRE ATT\&CK framework
• Knowledge of Azure security, identity (Entra ID), and endpoint security
• Strong analytical and troubleshooting skills

Other Requirements

• *Good to Have:**

• Experience in KQL query writing
• Exposure to Microsoft Defender suite (MDE, MDI, MDO)
• Knowledge of SOAR playbooks (Logic Apps)

• *Certifications (Preferred):**

• Microsoft SC\-200
• CEH / CySA\+ / GCIH

• *Soft Skills:**

• Good communication and reporting skills
• Ability to work in 24x7 shift model
• Team collaboration and incident handling mindset

• *\#body.unify div.unify\-button\-container .unify\-apply\-now:** focus, \#body.unify div.unify\-button\-container .unify\-apply\-\#body.unify div.unify\-button\-container .unify\-apply\-now: focus, \#body.unify div.unify\-button\-container .unify\-apply\-