Cyber Security Engineer

Cybersecurity Engineer :

SNP is seeking a proactive Security Engineer to join our cybersecurity team. In this role, they will be first line of defense for our managed service clients, responsible for monitoring, triaging, and remediating high-fidelity threats. Environments will have Microsoft Defender and Sentinel ecosystem to ensure our clients' environments remain resilient against 24/7 threats.

Key Responsibilities:

• SOC Operations: Monitor the Microsoft Sentinel queue and Defender 365 incidents, performing triage and initial containment of threats (e.g., isolating devices, suspending users).
• Incident Response: Investigate alerts related to Phishing, Ransomware, and Identity Compromise, documenting findings in the case management system.
• Health Monitoring: Perform daily/weekly health checks on security sensors (e.g., ensure Defender for Endpoint sensors are active and reporting).
• Vulnerability Management: Assist in running and reporting on vulnerability scans using Defender Vulnerability Management (TVM).
• Rule Tuning: Identify noisy alerts (false positives) and propose tuning adjustments to the Senior Engineering team to reduce alert fatigue.

Technical Skills (Must Have):

• Microsoft Defender Suite: Hands-on experience with Defender for Endpoint (MDE) and Defender for Office 365 (MDO).
• Querying: Ability to write basic to intermediate KQL queries to search logs and hunt for threats.
• Networking Basics: Understanding of TCP/IP, DNS, and common attack vectors (e.g., Pass-the-Hash, SQL Injection).
• Identity Basics: Familiarity with MFA troubleshooting and Self-Service Password Reset (SSPR) flows.

Certifications (Preferred):

• Microsoft Certified: Security Operations Analyst Associate (SC-200)