SIEM Content and Platform Engineer
- Location
- City of Westminster, England, United Kingdom
playbooks, and optimisation. Azure Monitor Agent, Azure Arc, Data Collection Rules, Log Analytics, custom tables, parsers, and custom ingestion. Windows Event Forwarding and Collection, XPath filtering, Windows Event IDs, Sysmon, and PowerShell logging. Azure Functions, Logic Apps, REST APIs, PowerShell, Python, and security workflow automation. MITRE ATT&CK mapping, threat ...