•Microsoft Sentinel SIEM Expertise: In-depth knowledge of Microsoft Sentinel SIEM platform features and capabilities Experience with Sentinel’s data connectors, workbooks, and automation rules.
•UEBA Proficiency: Understanding of UEBA concepts, including anomaly detection, behavioral baselines, and threat modeling and Ability to implement and fine-tune UEBA strategies to detect unusual or malicious behavior.
•Kusto Query Language (KQL): Advanced skills in writing and optimizing KQL queries to create effective alerts, detections, and dashboards and Experience with query performance tuning and complex data aggregation.
•Scripting and Automation: Proficiency in scripting languages (e.g., PowerShell, Python) for automating tasks and developing custom integrations and Knowledge of Sentinel’s automation and orchestration capabilities.
•Data Analysis and Interpretation: Ability to analyze and interpret complex security data and trends and Skills in developing actionable insights from data patterns and anomalies
ResponsibilitiesSIEM Management
- Deploy, configure, and maintain Microsoft Sentinel SIEM solution.
- Integrate various log sources (cloud, on-prem, network, endpoints) into Sentinel.
- Ensure data connectors and ingestion pipelines are optimized for performance and cost.
Security Monitoring & Analysis
- Develop and maintain detection rules, analytics, and use cases in Sentinel.
- Monitor alerts and dashboards for suspicious activities and anomalies.
- Collaborate with SOC analysts for incident triage and investigation.
Automation & Optimization
- Implement automation using Logic Apps and Playbooks for alert enrichment and response.
- Optimize Sentinel workbooks, hunting queries, and dashboards for better visibility.
Compliance & Reporting
- Generate compliance and security posture reports using Sentinel workbooks.
- Ensure adherence to regulatory requirements (ISO, GDPR, etc.) through proper logging and monitoring.
Threat Hunting & Incident Response
- Conduct proactive threat hunting using KQL (Kusto Query Language).
- Assist in forensic analysis and root cause investigations.
Maintenance & Upgrades
- Apply patches, updates, and maintain Sentinel health.
- Monitor ingestion costs and optimize retention policies.
Graduate/MCA/B.Tech/B.E/M.Tech
About UsSkills Required
- In-depth knowledge of Microsoft Sentinel SIEM platform (features, connectors, workbooks, automation rules)
- Experience integrating log sources (cloud, on-prem, network, endpoints) into Sentinel and optimizing ingestion pipelines
- Proficiency with UEBA concepts and implementing UEBA strategies for anomaly detection and behavioral baselines
- Advanced Kusto Query Language (KQL) skills for queries, detections, dashboards, and performance tuning
- Scripting and automation experience (PowerShell, Python) and familiarity with Sentinel automation/orchestration
- Experience implementing automation using Logic Apps and Playbooks for alert enrichment and response
- Ability to analyze and interpret complex security data, develop actionable insights, and perform threat hunting
- Experience generating compliance and security posture reports and ensuring logging/monitoring meet regulatory requirements
- Education: Graduate/MCA/B.Tech/B.E/M.Tech
What We Do
Choosing a digital partner is about more than capabilities — it’s about collaboration and character. Unrealistic overhauls and off-the-shelf products ignore what matters most — your unique needs, culture, goals, and your legacy data and technology environments. At EXL, our collaboration is built on ongoing listening and learning to adapt our methodologies. We’re your business evolution partner—tailoring solutions that make the most of data to make better business decisions and drive more intelligence into your increasingly digital operations. Whether your goals are scaling the use of AI and digital, redesign operating models, or driving better and faster decisions, we’re here to partner with you to help you gain—and maintain—competitive advantage with efficient, sustainable models at scale. Our expertise in transformation, data science, and change management helps make your business more efficient and effective, improve customer relationships and enhance revenue growth. Instead of focusing on multi-year, resource- and time-intensive platform designs or migrations, we look deeper at your entire value chain to integrate strategies with impact. We use our specialization in analytics, digital interventions, and operations management—alongside deep industry expertise — to deliver solutions that help you outperform the competition. At EXL, it’s all about outcomes—your outcomes—and delivering success on your terms. Share your goals with us and together, we’ll optimize how you leverage data to drive your business forward. For more information, visit www.exlservice.com.
