Managed Services Lead Consultant – MXDR

About the role

As an IGS XDR Engineer within Check Point’s Infinity Global Services (IGS) Managed eXtended Detection and Response (MXDR) team, you will protect customers’ digital assets, sensitive data and critical systems from sophisticated cyber threats. You will work closely with cross‑functional teams to assess risk, design security strategies and ensure compliance with industry standards.

Key responsibilities

• Collaborate with DevOps and product teams to deliver security monitoring services across multiple clients.
• Perform vigilant monitoring of intrusion detection, file integrity, endpoint protection, log management and SIEM solutions.
• Leverage cutting‑edge XDR tools such as Microsoft Sentinel, Microsoft Defender for Endpoint, Check Point Harmony Endpoint and other EDR solutions.
• Navigate Azure cloud environments to provide comprehensive security coverage.
• Analyze security events using log data and open‑source intelligence to differentiate legitimate incidents from false positives.
• Maintain detailed case management records and manage ticketing workflows.
• Develop and maintain custom SIEM rules, alerts and dashboards.
• Participate in on‑call rotations and provide after‑hours support for client operations.
• Lead and mentor SOC analysts, fostering a collaborative team environment.

Required profile

• Upbeat, positive attitude with strong analytical and troubleshooting abilities.
• Excellent written and verbal communication skills.
• Team player with prior experience as a SOC Analyst.
• Working knowledge of SIEM and incident‑management solutions.
• Technical understanding of core cybersecurity technologies and emerging capabilities.
• 5+ years of relevant experience in cybersecurity or SOC environments.

Required skills

• Microsoft Sentinel
• Microsoft Defender for Endpoint
• Check Point Harmony Endpoint
• Azure cloud security
• SIEM platforms (e.g., Splunk, Sentinel)
• PowerShell, Python, Bash scripting
• Vulnerability management and malware analysis
• Threat hunting and detection engineering
• Incident response
• Operating systems and networking fundamentals
• Kubernetes and container security