01
TRPD-26-04982
Cybersecurity Controls & Risk Assessment Analyst (Sentinel/KQL)
Cybersecurity professional (3–5 years) to support enterprise cyber transformation by assessing cyber capabilities and security control effectiveness across identity, endpoint, network, cloud, and application domains. The role involves mapping controls to frameworks (NIST CSF, ISO 27001, CIS), identifying gaps and risks, managing evidence and remediation tracking, and producing metrics/reporting. Hands-on exposure to Microsoft Sentinel and KQL is required to validate controls using security telemetry and to analyze events and trends for security maturity improvements.
Position summary
- Location
- India
- Workplace
- Hybrid
- Employment
- Full Time
- Experience
- Minimum 3 years and Maximum 5 years
Role overview
Why This Role Matters.
Cybersecurity professional (3–5 years) to support enterprise cyber transformation by assessing cyber capabilities and security control effectiveness across identity, endpoint, network, cloud, and application domains. The role involves mapping controls to frameworks (NIST CSF, ISO 27001, CIS), identifying gaps and risks, managing evidence and remediation tracking, and producing metrics/reporting. Hands-on exposure to Microsoft Sentinel and KQL is required to validate controls using security telemetry and to analyze events and trends for security maturity improvements.
Your Impact
Deliver Enterprise Value
Help organisations solve complex business problems through modern technology, consulting expertise and measurable outcomes.
Collaboration
Work Across Teams
Collaborate with consultants, architects, engineers and client stakeholders throughout the project lifecycle.
Growth
Learn Continuously
Gain exposure to enterprise technologies, certifications, mentoring and real-world project experience.
Career Path
Grow With Ubique
Build a long-term consulting career with opportunities to take on greater responsibility and leadership over time.
Responsibilities
What You'll Be Doing.
Every role at Ubique contributes directly to solving meaningful business challenges for our clients.
02
Review security controls against frameworks such as NIST CSF, ISO 27001, CIS Controls, and organizational standards.
03
Identify capability gaps, control deficiencies, cybersecurity risks, and transformation opportunities.
04
Support cyber maturity assessments and capability development roadmaps.
05
Assist with control documentation, evidence management, remediation tracking, and improvement initiatives.
06
Evaluate identity, endpoint, network, cloud, and application security capabilities.
07
Assess the effectiveness of preventive, detective, and corrective security controls.
08
Utilize Microsoft Sentinel, KQL, and security telemetry to support control validation, capability assessment, and security effectiveness reviews.
09
Analyze security events, trends, and control performance indicators to identify enhancement opportunities.
10
Support cyber governance, risk management, and assurance activities.
11
Contribute to cyber transformation programs focused on strengthening security posture and cyber resilience.
12
Develop recommendations for capability modernization, control optimization, and process improvement.
Technology stack
Tools & Technologies.
The platforms and technologies you'll use to build modern, enterprise-grade solutions.
01
Microsoft Sentinel
Required
02
KQL
Required
03
SIEM
Required
04
security telemetry
Required
05
NIST CSF
Required
06
ISO 27001
Required
07
CIS Controls
Required
08
security controls
Required
09
control effectiveness
Required
10
cyber risk
Required
11
cyber maturity assessment
Required
12
capability assessment
Required
13
governance risk and compliance
Required
14
identity security
Required
15
endpoint security
Required
16
network security
Required
17
cloud security
Required
18
application security
Required
19
incident response
Required
20
security metrics
Required
Requirements
Skills & Experience.
We value curiosity, collaboration and continuous learning. If you don't meet every requirement but believe you can make an impact, we'd still love to hear from you.
Essential
Required Qualifications
3–5 years experience in cybersecurity, cyber risk, security controls, governance/compliance, or cyber transformation
Security control assessments/control effectiveness reviews (preventive/detective/corrective)
Knowledge/exposure to control frameworks: NIST CSF, ISO 27001, CIS Controls (or equivalent)
Microsoft Sentinel (SIEM) working knowledge
KQL (Kusto Query Language) for security analysis/telemetry queries
Risk assessment and capability/maturity assessment concepts (gap identification, roadmaps)
Understanding of identity, endpoint, network, cloud, and application security domains
Documentation and reporting (control documentation, evidence management, dashboards/metrics)
Analytical/problem-solving and stakeholder engagement skills
Preferred
Nice to Have
Incident response methodologies knowledge
Knowledge of common attack techniques (e.g., MITRE ATT&CK concepts)
Experience with cyber governance, assurance activities, and executive-level reporting
Experience building security metrics/KPIs and dashboards
Experience with remediation tracking processes and control testing/validation approaches
What you'll gain
More Than Just A Job.
We're committed to helping every team member grow professionally, personally and technically while working on meaningful projects.
Global Exposure
Collaborate with international clients and multicultural teams on enterprise programmes.
Continuous Learning
Expand your expertise through mentoring, certifications and hands-on project experience.
Career Growth
Take ownership, develop leadership skills and grow your consulting career over time.
Flexible Working
Hybrid and remote collaboration designed around trust and delivering exceptional outcomes.
People First
Join a supportive culture where collaboration, respect and long-term relationships come first.
Enterprise Projects
Work on meaningful technology initiatives for leading organisations across industries.
Apply
Apply for Cybersecurity Controls & Risk Assessment Analyst (Sentinel/KQL)
One page, about two minutes. We only ask for what we actually need to have a first conversation.