.Capgemini is a global leader in partnering with companies to transform and manage their business by harnessing the power of technology. The Group is guided everyday by its purpose of unleashing human energy through technology for an inclusive and sustainable future. It is a responsible and diverse organization of 300,000 team members in nearly 50 countries. With its strong 50-year heritage and deep industry expertise, Capgemini is trusted by its clients to address the entire breadth of their business needs, from strategy and design to operations, fueled by the fast evolving and innovative world of cloud, data, AI, connectivity, software, digital engineering and platforms.We desire to hire MS Sentinel SIEM/SOAR Automation Engineer - L3 Specialist to be part of our team integrated CIS Business Unit.Security Engineers implement and maintain SIEM/SOAR platforms to analyze security events, configure alerts for proactive threat detection, and collaborate on adapting configurations. They use SOAR tools to automate incident responses, improving efficiency and effectiveness in cybersecurity operations. A deep understanding of cybersecurity principles and SIEM/SOAR systems is crucial for deploying effective automated solutions and enhancing defense against cyber threats.Key responsibilities:Responsible for designing, implementing SIEM/SOAR solutions aligned with cybersecurity strategy. Leads integration, collaborates for seamless deployment, customizes tools, and leverages automation to enhance security posture.SIEM/SOAR Architecting and Implementation: responsible for designing, developing, and implementing SIEM and SOAR solutions. Crafting comprehensive architectural designs that align with the organization's cybersecurity strategy, incorporating advanced features to enhance threat detection and incident response capabilities. Lead the implementation and integration, collaborating with cross-functional teams to ensure seamless deployment. Customizing and optimizing the tools, creating tailored configurations, and leveraging automation to improve overall security posture.Advanced SIEM Configuration: Develop and implement complex configurations within the SIEM system to ensure optimal detection and response capabilities, including correlation rules, filters, and data source integrations.Custom Scripting and Automation: Develop custom scripts or automation workflows to enhance the automation capabilities of the SOAR platform, allowing for more efficient incident response and mitigation.Optimization: Continuously fine-tune and optimize SIEM/SOAR modules to improve their efficacy over time, adapting to changes in the threat landscape and organizational needs.Collaboration with IT and Security Teams: Work closely with IT and other security teams to understand the organization's infrastructure, applications, and network architecture, ensuring effective integration of SIEM/SOAR
