Azure Sentinel Sr analyst

About the Position

We are seeking an Azure Sentinel Sr analyst with deep expertise in Microsoft Sentinel and Kusto Query Language to join our team in India.

Responsibilities

• Thoroughly investigate security incidents escalated by L1 analysts, going beyond initial alerts to understand the full scope and impact.
• Analyze complex security events, logs, and incident data from various sources integrated into Azure Sentinel.
• Determine if a security event is a genuine incident and classify its severity.
• Utilize Azure Sentinel's investigation graph to explore entities, connections, and timelines of attacks.
• Proactively search for undetected threats within the organization's Azure environment and connected data sources using Kusto Query Language (KQL) in Azure Sentinel.
• Lead and coordinate incident response activities, including containment, eradication, and recovery from security incidents.
• Develop and maintain incident response playbooks within Azure Sentinel.
• Execute automated response actions through Sentinel playbooks, such as blocking IPs, isolating compromised systems, or enriching incident data.
• Collaborate with other security teams (e.g., L1, L3, forensic teams), IT, and business stakeholders to resolve incidents effectively.
• Document findings, actions taken, and lessons learned to improve future incident response procedures.

Requirements

• Deep expertise in Microsoft Sentinel: Including data connectors, analytics rules, workbooks, hunting queries, incidents, and automation (Logic Apps/Playbooks).
• Kusto Query Language (KQL) mastery: Essential for advanced threat hunting, data analysis, and rule creation in Sentinel.
• Understanding of Azure security services: Strong knowledge of Azure Security Center/Defender for Cloud, Azure Active Directory (now Microsoft Entra ID), Azure Monitor, Azure Networking, and other relevant Azure services.
• SOAR (Security Orchestration, Automation, and Response): Experience in building and optimizing playbooks using Azure Logic Apps within Sentinel.
• MITRE ATT&CK Framework: Ability to map security events and detections to MITRE ATT&CK tactics and techniques for comprehensive threat analysis.
• Cloud Security Concepts: A solid understanding of cloud computing security principles, especially within the Azure ecosystem.

About Aspire Systems

Aspire Systems is a global technology services firm serving as a trusted technology partner for more than 275 customers across the globe. Founded in 1996, Aspire Systems helps leading enterprises engineer the future through its deep technology and domain expertise in Software & Technology, Banking, Insurance, Retail, and Public Sector. AI-first IP, platforms, and domain expertise power Aspire System's advanced technology services.

Aspire’s core philosophy of ‘Attention. Always.’ communicates its belief in lavishing care and attention to its employees, customers, and society. The company currently has over 4000 employees globally and is CMMI Level 3 certified. It operates across North America, LATAM, Europe, Middle East, and Asia Pacific.

As an employer, Aspire Systems has been recognized 12 times in a row as one of the Top 100 ‘Best Companies to Work For’ by the Great Place to Work® Institute. To know more about Aspire Systems, visit https://www.aspiresys.com/

Why Join Aspire Systems

Being an Aspirian means being part of a future-ready, global workplace where you will work on emerging technologies, collaborate with diverse teams, and contribute to meaningful digital transformation initiatives.

We foster innovation, value diverse perspectives, and enable continuous learning and career growth - guided by our philosophy of “Attention. Always.” Aspire also follows a hybrid work model, promoting flexibility, collaboration, and work-life balance.

Learn more about Life at Aspire: https://www.aspiresys.com/careers/life-at-aspire

Our Commitment to Diversity & Inclusion

At Aspire Systems, we foster a work culture that appreciates diversity and inclusiveness. We understand that our multigenerational workforce represents different regions, cultures, economic backgrounds, races, genders, ethnicities, education levels, personalities, and religions. We believe these differences make us stronger and are committed to building an inclusive workplace where everyone feels respected and valued.

Privacy Notice

Aspire Systems values your privacy. Candidate information collected through this recruitment process will be used solely for hiring purposes, handled securely, and retained only as long as necessary in compliance with applicable privacy laws.

Disclaimer

The above statements are not intended to be a complete statement of job content, but rather to serve as a guide to the essential functions performed by the employee in this role. Management retains the discretion to add or change the duties of the position at any time.

Apply

Share Job