Senior Consultant, Cybersecurity

Job description

Malomatia is seeking a Senior Cybersecurity Consultant to join its Cybersecurity Practice as an Incident Handler within the security operations function. You will lead the detection, investigation, containment and recovery of security incidents across enterprise and cloud environments, with a strong focus on the Microsoft security ecosystem: Defender (EDR/XDR), Sentinel, Purview and Data Loss Prevention.

Responsibilities

• Lead end-to-end handling of security incidents: detection, triage, investigation, containment, eradication and recovery, in line with response processes and SLAs
• Operate, tune and investigate using Microsoft Defender for Endpoint, Office 365, Identity and Cloud Apps
• Use Microsoft Sentinel for log analysis, correlation and automated response; develop and tune analytic rules, KQL queries, workbooks and SOAR playbooks
• Use Microsoft Purview for information protection, insider risk management and compliance, and investigate data-related alerts
• Configure, monitor and respond to DLP policies across Microsoft 365 and endpoints and refine them to cut false positives
• Conduct proactive threat hunting and detection engineering across Microsoft 365 and Azure

Requirements

• Bachelor's / college degree in Computer Science, Information Security or a related field
• At least 8 years of experience in cybersecurity operations, incident response or security monitoring, with significant hands-on Microsoft security tooling
• Strong hands-on experience with Microsoft Defender, Sentinel, Purview and Microsoft 365 DLP
• Proficiency with KQL for investigation and detection; EDR investigation, log analysis, SIEM/SOAR, endpoint and cloud forensics
• Relevant certifications highly desirable, such as SC-200, SC-100, SC-400, GCIH/GCFA, CISSP/SSCP or CompTIA CySA+

Skills

• DLP
• Incident Response
• KQL
• Microsoft Defender
• Microsoft Purview
• Microsoft Sentinel