Security Consultant Secops
Microsoft· Technology Consulting
Hyderabad, IndiaOn-sitePosted 2mo ago
About the role
The EAG Security Consultant - SecOps helps customers modernize security operations by designing, implementing, and operationalizing Microsoft Sentinel, Microsoft Defender XDR, Security Copilot, and agentic SOC capabilities. The role blends hands-on delivery, consulting judgment, automation, and customer-facing execution to improve detection, investigation, response, threat hunting, and operational resilience across hybrid and multi-cloud estates.
Responsibilities
- Lead SecOps discovery workshops, capture current-state SOC maturity, map detection, response, escalation, and operational gaps, and translate findings into pragmatic modernization roadmaps.
- Design and implement Microsoft Sentinel architectures including data onboarding, analytics rules, automation playbooks, workbooks, incident enrichment, and operational reporting.
- Operationalize Microsoft Defender XDR workloads across endpoint, identity, cloud, email, and SaaS signals to improve alert fidelity, investigation depth, and response consistency.
- Develop KQL hunting logic, incident triage workflows, response playbooks, and reusable delivery assets that reduce manual effort and improve analyst productivity.
- Apply agentic SOC patterns using SOCBot / Autonomous SOC concepts, with clear human-in-the-loop approval, read/write separation, auditability, and safe automation guardrails.
- Partner with security architects, customer SOC leaders, product groups, and engineering teams to resolve delivery risks, validate design choices, and drive customer outcomes.
- Support pre-sales and solution shaping through effort estimation, technical assumptions, discovery questions, solution narratives, and customer-facing demos.
Qualifications
- 5+ years of experience in cybersecurity consulting, security operations, SOC engineering, incident response, SIEM/SOAR, or related security delivery roles.
- Hands-on experience with Microsoft Sentinel and at least two Defender workloads such as Defender for Endpoint, Defender for Identity, Defender for Cloud, Defender for Cloud Apps, or Defender for Office 365.
- Strong understanding of detection engineering, incident triage, threat hunting, investigation lifecycle, containment / remediation options, and SOC governance.
- Ability to produce high-quality customer-facing deliverables such as architecture documents, discovery outputs, deployment plans, design decisions, risk registers, and operational runbooks.
- Working knowledge of KQL, Microsoft security logs, identity and endpoint signals, cloud security telemetry, and common attack techniques.
- Experience communicating complex security concepts to technical teams, program stakeholders, and executive audiences.
- Degree or equivalent experience in Computer Science, Engineering, Information Security, Cybersecurity, or a related discipline.
Skills
Required:Microsoft SentinelDefender XDRKQLSOC frameworksCommunication
Nice to have:Automation and AI
Last updated Aug 13, 2026. Interested? Apply on the company site.
About Microsoft
Cloud ComputingConsumer ElectronicsSoftwareTechnologyliquid-ai-recruiting-target
More open roles at Microsoft
- Senior Security Sales Specialist3d agoHybrid (Auckland) · Digital Solution Area Specialists
- Technical Program Manager3d agoRedmond, WA, Multiple Locations · Technical Program Management
- AI Business Solutions Specialist Manager - M365 Copilot / Agents / Dynamics 365 / Power Platform3d agoTokyo · Solution Area Specialists
- Senior Technical Program Manager3d agoRedmond, WA, Hybrid (Multiple Locations) · Technical Program Management
- Senior Subsea Project & Operations Manager3d agoTokyo, Japan · Sourcing Engineering