Security Operations

• administer and engineer improvements to enterprise security telemetry and detection platforms—including Splunk Cloud, Cribl Cloud, CrowdStrike Falcon, and Tines
• implement secure by default telemetry patterns and logging standards across operating systems, cloud, and network data sources
• design, build, and maintain Cribl Cloud pipelines for secure, cost managed, and high throughput log routing
• engineer Splunk Cloud content with an emphasis on signal quality, performance, and SLO/KPI driven cost control
• define and maintain role-based access controls (RBAC)
• contribute to integration and automation across SOC tooling and enterprise systems
• participate in incident response by developing targeted searches, conducting log analysis, and identifying root causes

Staff SOC Engineer – Security Telemetry, Detection Platforms

• Deliver security monitoring and incident response services using Microsoft Sentinel
• Help clients detect, investigate, and respond to security threats in hybrid and cloud environments
• Contribute to the design, implementation, tuning, and ongoing operation of Sentinel-based security solutions
• Support clients in improving their security posture and operational maturity
• Work in a matrixed delivery environment with clients, internal security architects, and Microsoft-aligned teams
• Demonstrate Avanade’s values, professional consulting behaviors, and a strong focus on quality and outcomes

Manager, Security Operations – Sentinel

• Provides security event monitoring and analysis to identify critical security events at client sites.
• Characterize and analyze network traffic to identify anomalous activity and potential threats to network resources.
• Coordinate with customer staff to validate security alerts.
• Document and escalate incidents that may cause ongoing and immediate impact to the environment.
• Perform event correlation using information gathered from a variety of sources to gain situational awareness.
• Receive and analyze network alerts and determine possible causes.
• Provides recommendations for system tuning and enhancements.
• Analyze identified malicious activity to determine weaknesses exploited and effects on system and information.
• Conduct research, analysis, and correlation across a variety of all source data sets.
• Notify customer of suspected cyber incidents and articulate the event’s history and potential impact.
• Work with customers to resolve computer security incidents and vulnerability compliance.
• Provide guidance and expertise to SOC Analyst I’s and other team members.
• Participate in an on-call rotation.
• Commits changes to DevOps repositories and syncs global changes to client environments.
• Serve as the primary person for onboarding new clients into various services.
• Writes new analytics rules, log parsers, and workbooks.
• Performs proactive threat hunting.
• Serves as a technical resource for the Sales team during the sales process.

Security Operations Center Analyst II

• Triage alerts, investigate suspicious activity, lead incident response steps, and coordinate containment and recovery efforts.
• Make sure logs and security data are gathered correctly, cleaned up, and organized so the team can analyze them effectively.
• Examine systems, files, logs, and network data to understand what happened during security events.
• Help newer analysts grow by sharing your experience, offering guidance, and running training sessions when needed.
• Assist team members with technical questions, tool usage, investigation methods, and established response workflows.
• Act as the point person during your shift: manage workload, oversee investigations, ensure smooth handoffs, and support teammates.
• Look for opportunities to improve processes, recommend new tools or automations, and help refine how the team operates.

See all jobs on JobTailor

Staff SOC Engineer – Security Telemetry, Detection Platforms

Manager, Security Operations – Sentinel

Security Operations Center Analyst II

Senior Security Operations Center (SOC) Analyst