Description

Key Skills: XSOAR, Splunk, Cyber Security, Automation, Content Management System, MITRE ATT&CK, Threat Detection, Incident Response, Security Operations, SIEM

Roles & Responsibilities:

• Monitor, investigate, and respond to cybersecurity incidents and security events.
• Develop and improve threat detection use cases based on the MITRE ATT&CK framework and Cyber Kill Chain.
• Create and maintain security content for threat detection and response platforms.
• Develop automation workflows and playbooks using XSOAR and other security automation tools.
• Use Splunk and other security tools to analyze security events and identify potential threats.
• Collaborate with Threat Intelligence, Incident Response, Forensics, and Security Operations teams.
• Analyze attack patterns, tactics, and techniques to improve threat detection capabilities.
• Perform security investigations by correlating data from multiple systems and datasets.
• Participate in penetration testing and red team exercises to validate security use cases.
• Prepare security metrics, trend reports, and management reports.
• Stay updated on emerging cyber threats, attack techniques, and security trends.
• Support junior analysts and ensure timely resolution of security incidents.

Experience Required:

• 6 - 10 years of experience in Cybersecurity, Information Security, or related IT fields.
• Strong experience with XSOAR, Splunk, and security automation.
• Experience in security event monitoring, investigation, and incident response.
• Good knowledge of MITRE ATT&CK and Cyber Kill Chain frameworks.
• Experience in threat detection, security content development, and use case management.
• Understanding of offensive security and common attack methods.
• Experience with network security controls such as Firewall, IPS, WAF, Proxy, and VPN.
• Knowledge of host and network forensics and security investigation tools.
• Experience with tools such as Wireshark, tcpdump, EnCase, FTK, SIFT, Volatility, or other forensic tools is an added advantage.
• Knowledge of cloud security, operating system security, application security, and database security is preferred.
• Experience in information security risk management, audits, and risk assessments is an added advantage.
• Financial Services industry experience is preferred.
• Strong analytical, problem-solving, and communication skills.

Education: Any Post Graduation, Any Graduation

Key Skills

Education

Any Graduate