Lead Expert, D&T Cyber Defense
Core
Lead expert building and managing security operations, shaping SOC automation, and developing use cases with Azure Sentinel, Python, and Logic Apps.
Role type
Senior IC security operations lead (SOC automation)
Builds
SOC automation playbooks, detection logic, and monitoring infrastructure
Domain
Cybersecurity / Cloud Security
Required skills
Azure Sentinel, Python, Azure Logic Apps, SOC infrastructure management, threat detection, technical mentoring
Responsibilities
Design and maintain SOC use cases and detection logic in Azure Sentinel; Develop and maintain automation playbooks in Azure Logic Apps and Python; Manage and maintain SOC infrastructure including log forwarders and data connectors; Collaborate with security analysts to translate threats into actionable use cases; Perform health checks and optimization of the monitoring environment; Provide technical guidance and mentoring to SOC team members
