Minimum 4+ years of experience in designing, implementing, monitoring, and maintaining enterprise cybersecurity solutions across complex IT environments.
Strong expertise in Network Security, Information Security, Cyber Defense, Security Operations, Threat Detection, and Incident Response methodologies.
Hands-on experience implementing and managing security technologies including Firewalls, IDS/IPS, SIEM platforms, Endpoint Security, VPNs, WAF, EDR/XDR solutions, and access control systems.
Experience performing vulnerability assessments, penetration testing support, risk assessments, security audits, and remediation activities to strengthen enterprise security posture.
Strong understanding of Security Operations Center (SOC) processes, threat intelligence, cyber threat hunting, malware analysis, and incident response procedures.
Experience working with security monitoring and SIEM tools such as Splunk, QRadar, Sentinel, ArcSight, Elastic SIEM, or similar enterprise security platforms.
Strong knowledge of Identity and Access Management (IAM), Multi-Factor Authentication (MFA), Privileged Access Management (PAM), SSO, and Zero Trust security principles.
Experience securing cloud environments including AWS, Azure, or GCP security services, cloud governance, security policies, and cloud risk management practices.
Hands-on experience with network protocols, TCP/IP, DNS, routing, switching, encryption technologies, SSL/TLS, PKI, and secure communication mechanisms.
Experience implementing security automation, scripting, CI/CD security practices, DevSecOps methodologies, and compliance frameworks such as ISO 27001, NIST, SOC2, PCI-DSS, HIPAA, or similar standards.
Strong understanding of application security, secure coding principles, API security, web security vulnerabilities (OWASP Top 10), and security best practices.
Excellent analytical thinking, troubleshooting skills, communication abilities, and experience working within Agile/Scrum environments while collaborating with cross-functional teams