Capgemini

Sentinel Admin

Posted On

Jan. 22, 2026

Location

Bangalore, Karnataka

Experience Level

Experienced Professionals

Job Type

Permanent

Apply By

Feb. 25, 2026

Job Description

At Capgemini Engineering, the world leader in engineering services, we bring together a global team of engineers, scientists, and architects to help the world’s most innovative companies unleash their potential. From autonomous cars to life-saving robots, our digital and software technology experts think outside the box as they provide unique R&D and engineering services across all industries. Join us for a career full of opportunities. Where you can make a difference. Where no two days are the same.

Your role

We are hiring for Sentinel Admin with 5 to 10 years of experience for Pan India location. Microsoft Sentinel Administrator will manage and optimize Sentinel SIEM deployments for large-scale environments, ensuring robust security monitoring and compliance. This role involves advanced configuration, detection engineering, automation, and strategic integration with Azure services.

Lead design and operations of Microsoft Sentinel in Azure. workspaces for multi-tenant or enterprise-scale deployments architecture, KQL-based analytics, playbooks (Logic Apps), and Azure-native integrations.
Sentinel Workspaces, Azure Log Analytics, Data Collection Rules (DCR), multi-tenant/multi-subscription strategy, RBAC, Defender suite alignment.
Data Connectors (Azure AD, M365, Defender, AWS, Syslog/AMA), custom parsers via DCR, normalization with ASIM.
KQL analytics rules, scheduled queries, fusion/ML detections, hunting queries, content from Microsoft content hub.
Sentinel Playbooks (Logic Apps): connectors, conditional workflows, enrichment, auto-response.
Log Analytics ingestion & retention optimization, data caps & cost policy, table partitioning, LA query performance tuning, commitment tiers.
KQL analytics rules, Sentinel Playbooks, Workbooks, Hunting queries, DCRs, Data connector configurations, RBAC models.
KQL mastery; Azure administration (Log Analytics, Logic Apps, Defender, Entra ID); PowerShell/Python; ASIM; Sentinel content lifecycle.

Your Profile

7+ years of experience in SIEM administration, with at least 3+ years in Microsoft Sentinel.
Expertise in KQL and Azure security services (Defender, AD, Security Center).
Strong scripting skills (PowerShell, Python).
Deep understanding of threat detection, incident response, and MITRE ATT&CK.
Experience with SOAR automation and integration with third-party tools

What you'll love about working here

You can shape your career with us. We offer a range of career paths and internal opportunities within Capgemini group. You will also get personalized career guidance from our leaders.
You will get comprehensive wellness benefits including health checks, telemedicine, insurance with top-ups, elder care, partner coverage or new parent support via flexible work.
At Capgemini, you can work on cutting-edge projects in tech and engineering with industry leaders or create solutions to overcome societal and environmental challenges.

Capgemini is a global business and technology transformation partner, helping organizations to accelerate their dual transition to a digital and sustainable world, while creating tangible impact for enterprises and society. It is a responsible and diverse group of 340,000 team members in more than 50 countries. With its strong over 55-year heritage, Capgemini is trusted by its clients to unlock the value of technology to address the entire breadth of their business needs. It delivers end-to-end services and solutions leveraging strengths from strategy and design to engineering, all fueled by its market leading capabilities in AI, generative AI, cloud and data, combined with its deep industry expertise and partner ecosystem.

Jobs at Bangalore

KPMG

Assistant Manager - TPRM-Advisory S…

KI Professional