Office 365 Security Administrator (Sentinel Administration)

Job Description:

Office 365 Security Administration & Configuration and Microsoft Sentinel Administration

Sentinel administration is mandatory,

Key Responsibilities

Office 365 Security Administrator:

• Administer and configure security settings for Office 365 services, including Exchange Online, SharePoint Online, Microsoft Teams, and OneDrive.
• Set up and maintain Azure Active Directory (AAD) security features, such as Conditional Access policies, Multi-Factor Authentication (MFA), and role-based access control (RBAC).
• Configure Data Loss Prevention (DLP) policies, email encryption, and Microsoft Defender for Office 365 to protect sensitive data and mitigate phishing threats.
• Conduct regular security assessments using tools like Secure Score and implement recommended configurations to improve security posture.
• Troubleshoot and resolve Office 365 security-related issues, ensuring minimal downtime and optimal user experience.

Microsoft Sentinel Administration:

• Administer Microsoft Sentinel, including onboarding data sources (e.g., Office 365, Azure AD, third-party systems) and managing connectors.
• Tune Sentinel detection rules and analytics using Kusto Query Language (KQL) to reduce false positives and improve threat detection accuracy.
• Monitor security events and incidents in real-time through Sentinel dashboards, investigating anomalies and coordinating responses with the security team.
• Develop and optimize automated playbooks for incident response using Azure Logic Apps integrated with Sentinel.
• Generate detailed reports and metrics on security incidents, trends, and system performance for management and compliance purposes.

Job Description:

Office 365 Security Administration & Configuration and Microsoft Sentinel Administration

Sentinel administration is mandatory,

Key Responsibilities

Office 365 Security Administrator:

• Administer and configure security settings for Office 365 services, including Exchange Online, SharePoint Online, Microsoft Teams, and OneDrive.
• Set up and maintain Azure Active Directory (AAD) security features, such as Conditional Access policies, Multi-Factor Authentication (MFA), and role-based access control (RBAC).
• Configure Data Loss Prevention (DLP) policies, email encryption, and Microsoft Defender for Office 365 to protect sensitive data and mitigate phishing threats.
• Conduct regular security assessments using tools like Secure Score and implement recommended configurations to improve security posture.
• Troubleshoot and resolve Office 365 security-related issues, ensuring minimal downtime and optimal user experience.

Microsoft Sentinel Administration:

• Administer Microsoft Sentinel, including onboarding data sources (e.g., Office 365, Azure AD, third-party systems) and managing connectors.
• Tune Sentinel detection rules and analytics using Kusto Query Language (KQL) to reduce false positives and improve threat detection accuracy.
• Monitor security events and incidents in real-time through Sentinel dashboards, investigating anomalies and coordinating responses with the security team.
• Develop and optimize automated playbooks for incident response using Azure Logic Apps integrated with Sentinel.
• Generate detailed reports and metrics on security incidents, trends, and system performance for management and compliance purposes.