Microsoft Defender Security Consultant

WifiRemotemid

Security ConsultantCybersecurity

0 views0 saves0 applied

Apply Now

Quick Summary

Overview

Job Title: Microsoft Defender Security Consultant Contract Type: Contract (Outside IR35) Rate: £500 per day Duration: 3 months (with possible extensions) Location: Two days travel to Birmingham and 3 days working from home every week We are seeking an experienced Microsoft Defender Security…

Key Responsibilities

Design and develop high-quality, high-fidelity threat detection use cases Write and optimize detection rules within Microsoft Sentinel using KQL Review and analyze existing security incidents to identify tuning and whitelisting opportunities Reduce…

Technical Tools

Security ConsultantCybersecurity

Responsibilities

~1 min read

→Design and develop high-quality, high-fidelity threat detection use cases
→Write and optimize detection rules within Microsoft Sentinel using KQL
→Review and analyze existing security incidents to identify tuning and whitelisting opportunities
→Reduce alert fatigue by refining detections and eliminating false positives
→Map detection logic to known attack methods and adversary techniques
→Modify and align detection rules between Microsoft Sentinel and Microsoft Defender
→Collaborate with SOC teams to enhance monitoring and response capabilities
→Provide recommendations for improving overall security posture

Requirements

~1 min read

Strong hands-on experience with Microsoft Defender (Defender for Endpoint, Identity, Cloud, etc.)
Advanced Microsoft Sentinel experience, including KQL query writing (equivalent to Level 3 SOC Analyst)
Proven experience in building and tuning threat detection use cases
Solid understanding of attack techniques and threat landscapes
Experience in incident analysis, alert tuning, and false positive reduction
Ability to translate security requirements into effective detection rules