Description

You will lead the investigation and remediation of complex security incidents within highly complex enterprise networks.

Responsibilities

• Analyze and respond to security incidents and alerts generated by SIEM, EDR, and IDS/IPS tools.
• Lead investigations into malware infections, data breaches, and insider threats.
• Perform digital forensics to collect, analyze, and preserve evidence for legal and compliance requirements.
• Provide detailed incident reports including root cause analyses and actionable recommendations.
• Collaborate with IT and business stakeholders to implement and improve security controls.
• Mentor junior analysts and support the continuous improvement of SOC processes and detection capabilities.

Required Skills

• 7+ years of experience supporting cyber defense operations in complex enterprise environments.
• Hands-on experience in SOC, SIRT, or CSIRT capacities.
• Expert understanding of APT, cybercrime, and hacktivist TTPs.
• Proficiency in Windows, OS X, and Linux operating systems.
• Deep knowledge of network protocols, application layer protocols, and security architecture.
• Demonstrable experience with scripting languages including PowerShell, Python, or Perl.
• Practical application of Cyber Kill Chain, NIST framework, MITRE ATT&CK, and SANS Critical Security Controls.
• Experience tuning signatures and rules for IDS/IPS, SIEM, EDR, and sandbox tools.
• Strong technical skills in incident handling, triage, and determining true versus false positives.

Preferred Skills

• Experience in intelligence-driven detection, digital forensics, and OT security principles.
• CSOC process and initiative management experience.

Key Skills

Education

Any Gradute