Information Security Consultant

Primary Skills (Mandatory)

• Security Automation & Workflow Development
  • Playbooks, runbooks, orchestration, and process automation
• Scripting & Development
  • Python (mandatory), PowerShell, Bash, JavaScript
• SIEM / SOAR Engineering
  • Microsoft Sentinel, Cortex XSIAM/XSOAR, Logic Apps
• API & Integration Engineering
  • REST APIs, JSON, Webhooks, Authentication (OAuth/API keys)
• SOC Operations Knowledge
  • Incident Response, Alert Enrichment, Case Management, Detection Workflows
• EDR & Security Platform Integration
  • CrowdStrike, SIEM, SOAR, ITSM, Threat Intelligence platforms
• ITSM & Ticketing Automation
  • ServiceNow integration, alert routing, case creation
• Source Control & DevOps
  • GitHub, Version Control, Deployment Templates
• Automation Testing & Troubleshooting
  • Validation, Error Handling, Operational Support
• Documentation & Process Improvement
  • Technical Documentation, Reusable Templates, Operational Efficiency

Secondary Skills (Preferred)

• Cloud & Azure Services
  • Azure Functions, Azure Automation, Azure Administration
• EDR & Extended Security Platforms
  • Microsoft Defender XDR, SentinelOne, Additional EDR solutions
• Reporting & Analytics
  • Power BI, Dashboard Development, KPI/SLA Reporting
• Low-Code Automation
  • Power Automate, Power Apps
• Security Engineering
  • Log Source Onboarding
  • Parser Development
  • Detection Rule Tuning
  • MITRE ATT&CK Mapping
• ITSM & Collaboration Tools
  • Jira
  • Workflow Management Platforms
• AI-Driven Security Operations
  • Microsoft Security Copilot
  • AI-assisted SOC Automation
  • Agentic AI Concepts

Essential Certifications (Quick Reference)

High Priority (Preferred)

• Microsoft SC-200 – Security Operations Analyst
• Microsoft AZ-204 – Azure Developer Associate
• Palo Alto Cortex XSIAM/XSOAR Certification
• CrowdStrike Falcon Certification

Medium Priority

• Microsoft Power Platform (PL-900 / PL-400)
• Microsoft AZ-104 – Azure Administrator

Nice to Have

• Microsoft SC-100 – Cybersecurity Architect
• Microsoft SC-300 – Identity & Access Administrator
• EC-Council ECIH
• GIAC GCIH