Qureos Mentor

Yoda Technologies Pty Ltd

SecOps Engineer (Threat Hunt and EDR SIEM).Key ResponsibilitiesShift Leadership &amp; Incident Response<ul><li>Lead SOC shifts: manage alert queues, assign cases, ensure SLA compliance, and deliver quality handovers.</li><li>Investigate and respond to advanced threats using Microsoft Defender for Endpoint and Microsoft Sentinel.</li><li>Execute incident response playbooks and document RCA for continuous improvement.</li></ul>Threat Hunting &amp; Detection Engineering<ul><li>Conduct hypothesis-driven hunts based on MITRE ATT&amp;CK techniques, threat intel, and behavioral anomalies.</li><li>Develop and tune detection rules in Microsoft Sentinel (KQL queries) and Defender for Endpoint policies.</li><li>Maintain hunt logs, coverage maps, and detection health dashboards.</li></ul>EDR &amp; SIEM Operations<ul><li>Administer and optimize Microsoft Defender for Endpoint and Microsoft Sentinel for maximum detection fidelity.</li><li>Build dashboards, correlation searches, and automation workflows to reduce MTTD/MTTR.</li><li>Ensure telemetry quality: data onboarding, parsing, enrichment, and retention.</li></ul>Reporting &amp; Stakeholder Communication<ul><li>Prepare and present threat hunt findings, detection coverage reports, and incident trends to leadership.</li><li>Translate technical insights into actionable recommendations for executives.</li></ul>Required Qualifications<ul><li>5&ndash;8 years in Security Operations / Threat Hunting / Detection Engineering.</li><li>Hands-on experience with Microsoft Sentinel (KQL queries, dashboards) and Microsoft Defender for Endpoint.</li><li>Proven Shift Lead experience in a 24&times;7 SOC environment.</li><li>Strong understanding of MITRE ATT&amp;CK, threat intel, and adversary TTPs.</li><li>Excellent communication and reporting skills for executive-level presentations.</li></ul>Nice-to-Have<ul><li>Experience with SOAR automation in Microsoft Sentinel.</li><li>Familiarity with cloud telemetry (Azure/M365).</li><li>Scripting (PowerShell/Python) for hunt automation and enrichment.</li><li>Certifications: SC-200, SC-300, Security+, CySA+, GCIA/GCIH.</li></ul>Tools &amp; Technologies<ul><li>SIEM: Microsoft Sentinel</li><li>EDR: Microsoft Defender for Endpoint</li><li>Threat Frameworks: MITRE ATT&amp;CK, D3FEND</li><li>Automation: PowerShell, Python</li></ul>KPIs<ul><li>Number of successful hunts and new detections authored</li><li>Reduction in MTTD/MTTR for advanced threats</li><li>Detection coverage improvements (mapped to ATT&amp;CK)</li><li>False positive reduction and alert fidelity</li></ul>Job Type: Full-timePay: &#8377;80,000.00 - &#8377;100,000.00 per yearBenefits:<ul><li>Flexible schedule</li><li>Health insurance</li></ul>Application Question(s):<ul><li>How many years of an experience Security Operations / Threat Hunting / Detection Engineering?</li><li>How much working years of an experience in Cloud security experience (Azure/M365)?</li><li>How many years of an experience in Scripting (PowerShell/Python) for automation and reporting?</li></ul>

SecOps Engineer (EDR SIEM)

SecOps Engineer (Vulnerability Management)<ul><li>Key Responsibilities</li></ul>Shift Leadership &amp; Incident Response<ul><li>Lead SOC shifts: manage alert queues, assign cases, ensure SLA compliance, and deliver quality handovers.</li><li>Investigate and respond to security incidents using Microsoft Defender for Endpoint and Microsoft Sentinel.</li><li>Execute incident response playbooks and document RCA for continuous improvement.</li></ul>Vulnerability Management<ul><li>Operate vulnerability scanning and remediation cycles; prioritize based on CVSS, EPSS, and asset criticality.</li><li>Collaborate with IT teams to close vulnerabilities within SLA and track exceptions.</li></ul>Threat Hunting &amp; Detection Engineering<ul><li>Conduct proactive hunts using MITRE ATT&amp;CK-based hypotheses.</li><li>Develop and tune detection rules in Microsoft Sentinel and Defender for Endpoint.</li></ul>Zscaler Administration<ul><li>Manage Zscaler ZIA/ZPA policies, troubleshoot access issues, and monitor logs for anomalies.</li><li>Collaborate with network teams to refine zero-trust access controls.</li></ul>Reporting &amp; Stakeholder Communication<ul><li>Prepare and present operational reports (incidents, vulnerabilities, KPIs) to leadership.</li><li>Translate technical findings into actionable insights for executives.</li></ul>Required Qualifications<ul><li>5&ndash;8 years in Security Operations / SOC / Incident Response.</li><li>Hands-on experience with Microsoft Sentinel, Microsoft Defender for Endpoint, and Zscaler.</li><li>Proven Shift Lead experience in a 24&times;7 SOC environment.</li><li>Strong skills in Threat Hunting, detection tuning, and vulnerability management.</li><li>Excellent communication and presentation skills for executive reporting.</li></ul>Nice-to-Have<ul><li>Familiarity with SOAR automation in Microsoft Sentinel.</li><li>Cloud security experience (Azure/M365).</li><li>Scripting (PowerShell/Python) for automation and reporting.</li><li>Certifications: SC-200, SC-300, Zscaler Certified Professional, Security+, CySA+.</li></ul>Tools &amp; Technologies<ul><li>SIEM: Microsoft Sentinel</li><li>EDR: Microsoft Defender for Endpoint</li><li>Zero Trust: Zscaler ZIA/ZPA</li><li>VM: Qualys/Tenable/Rapid7</li><li>Automation: PowerShell, Python</li></ul>Job Types: Full-time, PermanentPay: &#8377;303,570.60 - &#8377;1,380,290.45 per yearBenefits:<ul><li>Health insurance</li><li>Work from home</li></ul>Application Question(s):<ul><li>How many years of experience do you have in Security Operations?</li><li>How much Hands-on experience with Microsoft Sentinel, Microsoft Defender for Endpoint, and Zscaler?</li><li>How much experience in Threat Hunting, detection tuning, and vulnerability management?</li></ul>

SecOps Engineer (Vulnerability Management)

Join Yoda Technologies Pty Ltd and explore 2   exciting career opportunities. They're hiring for various roles with options for remote or on-site work. Apply today and become part of their innovative team.

Yoda Technologies Pty Ltd

ABOUT_COMPANY

SecOps Engineer (EDR SIEM)

SecOps Engineer (Vulnerability Management)