Description

You will manage security monitoring, active investigations, and incident response activities.

This role is remote.

Responsibilities

• Drive incident response activities, communicate with management, and document investigations.
• Review new attack vectors and implement changes for effective visibility and detection.
• Collaborate with cross-functional teams to mature security operations capabilities.
• Develop automated threat detection and behavioral analytics for cloud security operations.
• Support deployment of cloud security tools and processes for IaaS, PaaS, SaaS, and DevSecOps.

Required Skills

• 10+ years of information security experience, specifically in incident response and technical investigations.
• Hands-on experience with SOAR/Case Management (Palo Alto XSOAR).
• Proficiency with SIEM tools (Splunk) and EDR/XDR (Crowdstrike, Palo Alto).
• Knowledge of cloud security across GCP, AWS, and Azure.
• Experience with Palo Alto Firewalls, GlobalProtect, and network technologies.
• Practical knowledge of ICT cybersecurity in Windows and Linux environments.

Preferred Skills

• Experience with M365/O365 security, Phishing protection, and DLP tools.
• Familiarity with MDR services and cloud infrastructure forensics.

Key Skills

Education

Any Graduate