SIEM MS Sentinel Admin

1. He/she should be having 6+ years of experience in below given fields,

2. Monitor the host reporting status and raise internal support ticket in case of Non-Reporting of any host.

3. Troubleshoot host non-reporting issue and resolve it. Perform remediation for non-compliance sentinel agents

4. Worked in Cyber Security team and SIEM.

5. Fine-tuned the deployed use case to reduce the false positive alerts.

6. Assist to trim the logs at the indexing to reduce the daily sentinel License Utilization

7. Create weekly report according to the client format.

8. He/she should monitor the sentinel related tickets, response and resolve them in timely manner. Manage ticket & issues related to sentinel.

9. He/she should upgrade the sentinel indexer, search head, universal forwarder and heavy forwarder.

10. He/she should have experience in Indexer Clustering and Search Head Clustering environment.

11. Raise CRQ to perform any critical activity.

12. He/she should perform regular health check of sentinel components, perform backup checks and validation.

13. He/she should be ready to support during the component patching activity and ready to work out of the office hours in the night. (maximum 3 times in

a month)

14. Prepare Standard Operating Procedure (SOP), SMTD and other documents related to sentinel and Security compliance.

15. Prepare KB Articles & Best Practices documentation.