Description

Key Skills: SIEM, EDR, CrowdStrike Falcon, Splunk, Microsoft Sentinel, KQL, SOC Operations, Security Monitoring, Incident Investigation, Threat Detection, Log Analysis, Threat Hunting, Alert Triage, Incident Response

Roles & Responsibilities:

• Monitor SIEM alerts and investigate security events to determine severity, scope, and impact.
• Analyze endpoint and network telemetry to identify malicious activity and suspicious patterns.
• Support incident response workflows, including triage, escalation, containment coordination, and case documentation.
• Maintain and tune detections, dashboards, and operational reports across SOC tooling.
• Assist threat-hunting efforts by correlating logs, alerts, and endpoint activity across security platforms.

Experience:

• 6+ years of experience in SOC operations, SIEM monitoring, or cybersecurity analysis.
• Hands-on experience with SIEM monitoring, incident investigation, threat detection, and log analysis.
• Strong working knowledge of EDR operations, including CrowdStrike Falcon or equivalent endpoint security tooling.
• Experience with Splunk or Microsoft Sentinel, including KQL-based investigation and alert analysis.
• Ability to support SOC operations in a 24x7 environment with alert triage, escalation, and reporting.

Good to Have:

• Microsoft Sentinel
• Splunk
• KQL queries
• CrowdStrike Falcon

Education:

• Bachelor's degree in Computer Science, Information Security, or a related field preferred

Key Skills

Education

Any Graduate