Back to list

Vacancy description

L2 Security Engineer (Implementation - Microsoft Sentinel & Defender Suite) in Bangalore, भारत

Xencia Technology Solutions Private Limited

Bangalore, भारत

Job Description – L2 Security Engineer (Implementation – Microsoft Sentinel & Defender Suite)

Role: L2 Security Implementation Engineer

Experience: 4+ Years required

Specialization: Microsoft Sentinel, Microsoft Defender XDR Suite

Job Type: Full‑Time, 9AM - 7PM from Office in Bangalore (Implementation / Delivery)

Job Summary

We are looking for a skilled L2 Implementation Engineer with 4–5 years of hands‑on experience deploying and configuring Microsoft Sentinel and Microsoft Defender products .
This role focuses entirely on implementation, onboarding, integrations, policy configuration, customer deployments, and technical project delivery —not SOC monitoring.

Key Responsibilities (Implementation‑Focused)

Microsoft Sentinel – Implementation

  • Deploy and configure Log Analytics Workspace , data retention, workspace architecture.
  • Onboard data sources using connectors (Azure services, M365, Defender, Syslog, CEF agents, firewalls, proxies, SaaS apps).
  • Configure Log Analytics Agents / AMA on Windows, Linux, and network appliances.
  • Implement workbooks , dashboards , and basic analytic rules as part of initial setup.
  • Configure and test automation rules & SOAR Playbooks (Logic Apps) to meet customer use cases.
  • Integrate Sentinel with:
    • Microsoft Defender XDR
    • Azure AD / Entra ID logs
    • Azure Activity Logs
    • On‑prem servers
    • Firewalls (Palo Alto, Fortinet, Checkpoint)

Microsoft Defender Suite – Deployment & Configuration

Defender for Endpoint (MDE)

  • Onboard Windows, macOS, Linux devices using onboarding scripts, Intune, Group Policy.
  • Configure AV, EDR, ASR rules, firewall, network protection, web filtering, and device control.
  • Build and deploy endpoint security baselines using Intune or GPO.

Defender for Identity (MDI)

  • Deploy sensors on Domain Controllers.
  • Configure directory services integration.
  • Validate lateral movement and identity monitoring.

Defender for Cloud Apps (MDA/M365D Apps)

  • Configure app connectors (O365, AWS, GCP, Salesforce, ServiceNow).
  • Deploy session control, app discovery, conditional access app control.
  • Enable policies for DLP, file governance, and compliance.

Defender for Office 365

  • Configure Safe Links, Safe Attachments, anti‑phishing policies, impersonation protection.
  • Integrate O365 signals with Sentinel.

Defender for Cloud (Azure Security Center)

  • Configure subscriptions, security policies, recommendations & workload protections.
  • Enable defender plans for VMs, storage, SQL, containers, key vault, etc.

Additional Responsibilities

  • Gather customer requirements and convert them into technical implementation steps.
  • Prepare HLD/LLD documentation, architecture diagrams, implementation plans.
  • Perform POCs, pilots, environment assessments, and configuration validation.
  • Troubleshoot onboarding issues, connector failures, integration errors.
  • Conduct knowledge transfer (KT) sessions to customers post‑deployment.
  • Work with Microsoft Intune for onboarding Defender & deploying policies (if required).
  • Good Power shell and Linux scripting skills

Required Skills

  • Strong experience implementing:
    • Microsoft Sentinel
    • Defender for Endpoint
    • Defender for Identity
    • Defender for Office 365
    • Defender for Cloud Apps
    • Defender for Cloud (Azure)
  • Good hands‑on knowledge of:
    • Azure Log Analytics
    • KQL (basic‑intermediate for validation)
    • Azure Logic Apps (SOAR playbooks)
    • Azure AD / Entra ID logs
  • Strong understanding of onboarding methods, connectors, log ingestion, and device integrations.

Preferred Qualifications

  • Microsoft Certifications:
    • SC‑200 (Security Operations Analyst) / SC‑300 / AZ‑500 / AZ-900
  • Experience with firewalls, proxies, server logs, API integrations (for Sentinel connectors).

Soft Skills

  • Strong communication and customer‑facing skills.
  • Ability to work with delivery teams, architects, and customers.
  • Good documentation skills (HLD/LLD, runbooks).
  • Problem-solving skills and ownership mindset.

Similar vacancies

More like this role

  • Full-time
  • Cybersecurity

Rs 8 - 12 lakhs p.a.

Job Description: L2 Security Engineer – Imperva DAM - Location: Mumbai - Employment Type: Full-Time - Experience Level: Minimum 4 Years Exp. - NOTE- MANDATORY IMPERVA EXPERIENCE AND IMMEDIATE TO 30 DAYS NOTICE PERIOD CANDIDATES WILL BE CONSIDERED Position Summary We are seeking a detail-oriented and experienced L2 Security ...

Bombay, भारत

  • Hybrid
  • Full-time
... & Automation - PowerShell Administration and Automation - User Provisioning & Reporting Scripts - Basic Automation for Operational Tasks Preferred Skills - Microsoft Intune / Endpoint Manager - Microsoft Defender for Office 365 - Microsoft Purview - Microsoft Sentinel - Azure Administration (AZ-104) - Hybrid Exchange Environment ...

भारत

  • Remote
  • Hybrid
We are looking for experienced O365 (Microsoft 365) L1/L2 Support Engineers to provide technical support, troubleshoot Microsoft 365 applications, and ensure smooth day-to-day IT operations for enterprise https://jobeax.com/link/I35QTwNbGhYLsMr9 Responsibilities :- Provide L1/L2 technical support for Microsoft 365 applications ...

Bombay, भारत

Rs 4 - 6 lakhs p.a.

... 365 Support Engineer to manage, administer, and troubleshoot Microsoft 365 services, including Exchange Online, Microsoft Teams, SharePoint Online, OneDrive, Microsoft Entra ID, and related security and compliance solutions. The ideal candidate should have strong expertise in L2/L3 troubleshooting, Active Directory, MDM/MAM, ...

Calcutta, भारत

  • Remote
  • Hybrid
We are looking for experienced O365 (Microsoft 365) L1/L2 Support Engineers to provide technical support, troubleshoot Microsoft 365 applications, and ensure smooth day-to-day IT operations for enterprise https://jobeax.com/link/I35QTwNbGhYLsMr9 Responsibilities :- Provide L1/L2 technical support for Microsoft 365 applications ...

Delhi, भारत

  • Full-time
  • Cybersecurity

Rs 7 - 12 lakhs p.a.

Job Description: L2 Security Engineer – Imperva DAM - Location: Mumbai - Employment Type: Full-Time - Experience Level: Minimum 4 Years Exp. - NOTE- MANDATORY IMPERVA EXPERIENCE AND IMMEDIATE TO 30 DAYS NOTICE PERIOD CANDIDATES WILL BE CONSIDERED Position Summary We are seeking a detail-oriented and experienced L2 Security ...

Bombay, भारत

... troubleshooting Sentinel data connectors and log ingestion.- Knowledge of Microsoft Defender XDR, Microsoft Defender for Endpoint, Microsoft Entra ID, and Microsoft 365 security telemetry.- Experience with SIEM operations, security incident investigation, alert triage, and escalation.- Understanding of MITRE ATT&CK, security use cases, ...

Bangalore, भारत

  • Full-time

Rs 13 - 14 lakhs p.a.

Summary We are seeking an experienced Microsoft 365 Security & Compliance Engineer to lead the protection and governance of our digital environment. In this pivotal role, you will be responsible for architecting, implementing, and maintaining robust security frameworks that safeguard sensitive data while ensuring adherence ...

Bangalore, भारत

  • Contract

Rs 25 - 35 lakhs p.a.

... Key responsibilities - Monitor and manage enterprise endpoint security platforms in a 24x7 environment - Investigate, triage and resolve malware and endpoint security incidents - Support and administer CrowdStrike, Microsoft Defender, RSA, Azure Key Vault and phishing security tools - Escalate complex security events to L3 ...

Delhi, भारत

  • Hybrid
... You will support security design, implementation, threat detection, data protection, cloud security, and operational improvement initiatives using Microsoft security technologies such as Microsoft Defender, Sentinel, Entra ID, Defender for Cloud, and Purview. Key responsibilities: - Designing and implementing Microsoft security ...

Chennai, भारत

Crescendo Global Leadership Hiring India Pvt Ltd

Cyber Security Consultant - Security Control Implementation

  • Remote
... implementing identity and access controls, including MFA, SSO, RBAC, least privilege, privileged access, service accounts, and access reviews.- Hands-on exposure to Microsoft security tools such as Entra ID/Azure AD, Intune, Defender, Sentinel, PIM, Key Vault, LAPS, or equivalent platforms.- Experience configuring SIEM/logging integrations, ...

Noida, भारत