Description

You will monitor, analyze, and respond to security events across cloud and on-premise environments. You own the operational security workflow from detection to resolution.

Responsibilities

• Monitor security alerts using Splunk and EDR tools to identify threats and anomalies.
• Analyze and investigate security incidents, maintaining detailed documentation for reporting and compliance.
• Manage security configurations and policies for Web Access Firewalls (WAF) and endpoint protection.
• Collaborate with non-technical stakeholders to explain security risks and drive remediation efforts.
• Utilize ServiceNow to track, manage, and close security tickets and incidents.

Required Skills

• 3-4+ years of experience in IT security, Security Operations (SOC), or technical helpdesk roles.
• Hands-on experience with Splunk for log analysis and security information management.
• Proficiency in EDR solutions, specifically Microsoft Defender for Endpoint (MC65).
• Strong understanding of cloud platforms: Azure, AWS, and GCP.
• Working knowledge of Web Access Firewalls (WAF) and network security concepts.
• Experience with ServiceNow for IT service management and incident tracking.
• Ability to communicate complex technical issues clearly to non-technical audiences.

Preferred Skills

• Knowledge of ServiceNow security modules and integration.
• Experience with event monitoring tools and security reporting frameworks.

Key Skills

Education

Any Gradute