Azure SOC SME Engineer

WME Requires Azure SOC SME Engineer

Position:         Full-Time

Location:        Remote (Pacific Time Hours)

Start Date:      ASAP

Duration:        Six Months

Nationality:     ANY

Windows Management Experts (WME) is looking for a motivated and experienced Azure SOC SME Engineer Role to join one of our client companies. The candidate should have at least 2-3 years of experience with Azure Security Operations support integrating Sentinel and Log Analytics workspaces with on-premise Splunk, Q-radar SOAR platforms, and EDR. You will also support rule correlation engineering and build automation and playbooks in Azure.

That said, you will work with client SOC engineers for endpoint detection. You must have strong knowledge of Azure Defender, CSPM, services, Sentinel, and Monitoring analytics so that you can support Incident Response for Azure Cloud

The candidate should have strong expertise in Azure Resource Manager (ARM) templates and PowerShell scripting to automate deployment and management tasks. They should also be familiar with Azure DevOps for continuous integration and deployment.

That said, they should have experience with Azure security and compliance, including Azure Security Center, Azure Active Directory, and Azure Information Protection. They should be able to design and implement secure Azure architectures, conduct security assessments, and implement security policies and procedures.

Lastly, the successful candidate will be a self-motivated individual, who can work effectively in dynamic conditions and within deadlines. That said, the preferred candidate should expect to work 40 hours per week and should be flexible enough to work part-time hours as well.

Required Skills/Qualifications/Education:

  • A bachelor’s degree from an accredited college/university with Computer Science, Software Engineering, or Information Technology as its major coursework.
  • Certifications: Azure Security Operations and/or Azure Security Architect and/or Azure Security
  • GCP Security Command Center integration with Azure Sentinel.
  • Splunk and Qradar expertise.
  • Ability to support GCP alerting and Incident Response
  • Proficient in designing, implementing, and managing Azure Security Center policies and recommendations for continuous security monitoring.
  • Extensive experience in utilizing Azure Sentinel to detect, investigate, and respond to security incidents and threats within Azure environments.
  • Strong understanding of Azure Active Directory (AAD) and its integration with Azure Security Center for effective identity and access management.
  • Familiarity with Azure Defender, including configuring and fine-tuning threat protection across Azure resources such as virtual machines, containers, and databases.
  • Expertise in leveraging Azure Log Analytics and Azure Monitor to collect, analyze, and visualize security logs and telemetry data for proactive threat hunting and incident response.
  • Hands-on experience with Azure Key Vault for securely storing and managing cryptographic keys, secrets, and certificates used in Azure services and applications.
  • Proficient in implementing Azure Resource Manager (ARM) templates and Azure Policy to enforce security controls and compliance requirements across Azure subscriptions and resource groups.
  • Knowledge of Azure Virtual Network (VNet) architecture, including implementing network security groups (NSGs), Azure Firewall, and Azure DDoS Protection for securing network traffic.
  • Familiarity with Azure Bastion and Azure Private Link for secure remote access to Azure virtual machines and services, minimizing exposure to the public internet.
  • Strong understanding of Azure Security Center’s integration with third-party security solutions such as antivirus, SIEM, and IDS/IPS systems to enhance threat detection and response capabilities.

Responsibilities of the Desired Azure SOC SME Engineer:

  • Collaborate with cross-functional teams to design, implement, and maintain an effective Azure Security Operations Center (SOC) infrastructure.
  • Develop and maintain security monitoring use cases, rules, and alerts within Azure Sentinel to detect and respond to potential security incidents.
  • Conduct regular security assessments and vulnerability scanning of Azure environments, identifying and remediating any security gaps.
  • Lead incident response efforts by analyzing security incidents, coordinating with relevant teams, and implementing necessary containment and remediation actions.
  • Conduct threat-hunting activities using advanced techniques and tools to proactively identify and mitigate security threats within Azure environments.
  • Create and maintain comprehensive documentation of Azure SOC processes, procedures, and standards to ensure consistent and efficient operations.
  • Assist in the development and implementation of security awareness and training programs to educate users on secure Azure usage and best practices.
  • Collaborate with Azure infrastructure and application teams to ensure secure design and configuration of Azure resources in alignment with security requirements.
  • Participate in security incident investigations, including root cause analysis, to identify systemic issues and recommend appropriate preventive measures.
  • Monitor and respond to security alerts and events generated by Azure Security Center, Azure Sentinel, and other security tools.
  • Conduct regular security log analysis and auditing to identify suspicious activities, potential security breaches, and compliance violations.
  • Contribute to the development and maintenance of security incident response plans, playbooks, and runbooks.
  • Work closely with third-party vendors and security partners to evaluate and implement integrations between Azure SOC tools and external security solutions.
  • Provide technical guidance and mentorship to junior team members.

Core Values:

  • Integrity (Doing What’s Right)
  • Inclusion (Encouraging Diversity)
  • Teamwork (Working Together)
  • Excellence (Being Your Best)
  • Accountability (Taking Personal Responsibility)

Disclaimer:

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status.

Share:

Facebook
Twitter
LinkedIn

Apply for this Job

    You can opt out if you are not interested in updates about this job and related jobs.

    On Key

    More Posts

    Accounting-Finance Staff

    Accounting/Finance Staff

      Position: Full-Time Location:  Remote Start Date:  ASAP Nationality: Any Working Hours: 9 AM to 5 PM EST USA/ 9PM to 5AM- Manila Time Windows Management Experts (WME) is looking for an Accounting/Finance Staff role for one of our valued partners. WME empowers major companies,

    Click Here to Read Full Job Post »
    Microsoft Tech Support SME

    Microsoft Tech Support SME

      Position: Full-Time Location:  Remote Start Date:  ASAP Nationality: Any Windows Management Experts (WME) is looking for a Microsoft Tech Support SME role for one of our valued partners. We are seeking a Microsoft CRM and GP Technical Support SME to join our client’s team.

    Click Here to Read Full Job Post »
    Azure VWAN Engineer

    Azure VWAN Engineer

    Position:         Full-Time Location:        Remote Start Date:      ASAP Nationality:     ANY Windows Management Experts (WME) is looking for an Azure VWAN Engineer role for one of our valued partners. They will assist our client in troubleshooting/optimizing

    Click Here to Read Full Job Post »
    Media Manager and Outreach Specialist

    Media Manager and Outreach Specialist

    Location: Remote Report to: Full Time/Part-Time/Contract Position Type: Part Time Hourly Start Date: ASAP Nationality: ANY Windows Management Experts (WME) is looking for a dynamic and creative Media Manager and Outreach Specialist Role to join our team. In this role, you will be responsible for

    Click Here to Read Full Job Post »
    PMO Director

    PMO Director

    Location: Remote Report to: Executive Vice President / CEO Position Type: Part Time Hourly Start Date: ASAP Nationality: ANY Windows Management Experts (WME) is looking for a PMO Director role. The WME PMO Director is accountable for overseeing the smooth delivery of projects in the

    Click Here to Read Full Job Post »
    Senior Security Consultant Required by WME

    Senior Security Consultant

      Position: Full-Time / Part-Time Location:  Remote Start Date:  ASAP Nationality: Any Windows Management Experts (WME) is looking for a Senior Security Consultant role for one of our valued partners. This position provides consultation and direction around Microsoft security solutions to meet strategic and tactical

    Click Here to Read Full Job Post »

      You can opt out if you are not interested in updates about this job and related jobs.