Title: Interview Panel Not Aligned With Azure Sentinel Role Interview Experience: Negative I recently interviewed for an Azure Sentinel / SOC role at KPMG (Gurugram). My experience with the interview process was mixed. The first round interviewer was very knowledgeable and professional. The discussion covered important SOC and SIEM topics such as: Use case creation KQL queries Log source integration Parsing and fine-tuning MITRE ATT&CK framework Cyber Kill Chain The conversation was well aligned with Microsoft Sentinel operations, and I was informed that I had successfully cleared the first round. However, the second round interview was disappointing and not aligned with the role. The discussion focused almost entirely on very specific QRadar implementation methods, even though the role advertised and discussed initially was for Azure Sentinel. Instead of evaluating broader SIEM knowledge, Sentinel administration, detection engineering, or log management, the evaluation seemed to be restricted to experience with a single SIEM platform. Candidates with multi-SIEM experience, certifications, and strong Sentinel expertise may not be properly assessed if the panel evaluates only based on one specific tool. Another concern is that the initial requirement communicated was around 4 years of experience, but during the process it appeared that expectations were higher. This should ideally be clarified before scheduling interviews. The first round demonstrated how a well-prepared interviewer can conduct a strong technical discussion, but the second round lacked the same level of alignment with the role requirements. I hope the hiring team reviews the panel expertise and evaluation criteria to ensure candidates are assessed fairly based on the skills required for the role.

Il colloquio è stato complessivamente non troppo impegnativo e si è svolto in un clima tranquillo. Mi sono state poste principalmente domande di carattere generale sulle tecnologie che utilizzo e sulle mie esperienze. Inoltre, sono stati affrontati anche alcuni aspetti pratici, come ad esempio il comportamento da adottare in caso di ricezione di una mail di phishing, per valutare l’attenzione alla sicurezza informatica. Nel complesso, è stato un colloquio conoscitivo e orientato a comprendere le mie competenze di base e il mio approccio alle situazioni lavorative.