Senior Cybersecurity Consultant (Onsite)

About the role

We are looking for a Senior Cybersecurity Consultant to join our Cybersecurity Practice as an Incident Handler. You will lead detection, investigation, containment, and recovery of security incidents across enterprise and cloud environments, focusing on the Microsoft security ecosystem.

Key responsibilities

• Lead end‑to‑end incident handling, from detection to recovery, following defined processes and SLAs.
• Operate, tune, and investigate using Microsoft Defender for Endpoint, Office 365, Identity, and Cloud Apps.
• Use Microsoft Sentinel for log analysis, correlation, and automated response; develop KQL queries, analytic rules, workbooks, and SOAR playbooks.
• Leverage Microsoft Purview for data governance, insider risk, and compliance; manage Data Loss Prevention policies.
• Conduct proactive threat hunting across Microsoft 365 and Azure, creating new detections and refining existing ones.
• Perform host, endpoint, and cloud forensics to determine root cause, scope, and impact, preserving evidence.
• Document incidents, produce post‑incident reports, and continuously improve detection and response capabilities.

Required profile

• Proven hands‑on experience in incident response and the Microsoft security stack.
• Strong analytical and digital‑forensic skills.
• Ability to stay calm and decisive under pressure during active incidents.
• Experience collaborating with SOC analysts, threat‑intelligence, and IT‑operations teams.

Required skills

• Microsoft Defender (Endpoint, Office 365, Identity, Cloud Apps)
• Microsoft Sentinel (SIEM/SOAR) and KQL query writing
• Microsoft Purview and Data Loss Prevention (DLP) configuration
• Threat hunting and detection engineering
• Digital forensics and root‑cause analysis
• Incident response processes and documentation