Responsibilities:

Configure and manage Microsoft Sentinel SIEM for enterprise security monitoring.
Develop and maintain security detections, analytics rules, and KQL queries.
Monitor security alerts and investigate security incidents.
Perform threat hunting and support incident remediation activities.
Build automation playbooks using Microsoft Sentinel and Logic Apps.
Integrate security logs from Microsoft and third-party systems.
Support PKI infrastructure including certificate monitoring and certificate lifecycle management.
Monitor Active Directory Certificate Services (AD CS), Certificate Authorities, CRLs, and authentication events.
Create dashboards, workbooks, and security reports.
Collaborate with security and infrastructure teams to improve enterprise security.

Requirements:

5 years of experience supporting enterprise SIEM platforms.
Hands-on experience with Microsoft Sentinel administration, monitoring, and detection engineering.
Experience with KQL, analytics rules, and automation.
PKI Engineering: Demonstrable understanding of PKI solution design and operations: enrollment protocols (SCEP, EST), Certificate Policy / Certification Practice Statement (CP/CPS), trusted roles, Levels of Assurance, NIST SP 800-63, and real use cases such as certificate-based authentication and software signing/validation.
Knowledge of incident detection, investigation, and remediation.
Experience with Microsoft Defender, Microsoft Entra ID, and cloud security.
Strong troubleshooting, analytical, and communication skills.
Nice to have: Hands-on AI/agentic security tooling (e.g., Claude / LLM-assisted code & configuration analysis, prompt engineering for security use cases)

Education:

InnoCore Solutions, Inc.

Latest Jobs