Description

You will manage and execute security operations across a diverse stack of defensive technologies and infrastructure.

This role is on-site.

Responsibilities

• Execute tasks for SIEM, IDS/IPS, Privileged Account Management, Certificate Lifecycle Management, WAF, NDR, CI/CD, AIP, EDR, and HSM.
• Partner with Cyber Operations, IAM, Architecture, Network Services, DevOps, and Risk Governance to deliver security initiatives.
• Design and maintain production-quality log management and SIEM reports for data analysis and visualization.
• Author security runbooks, policy documentation, and best practice guides while implementing SOAR platforms.
• Develop automation scripts and playbooks to streamline SIEM operations and enhance efficiency.

Required Skills

• 5+ years of experience in IT Security or Information Technology.
• 3–5 years of enterprise-level SIEM experience.
• End-to-end administration of Elastic, Syslog servers, and SIEM technologies such as Devo or Google Chronicle.
• Proficiency in configuring and troubleshooting syslog-ng or rsyslog.
• Advanced Linux system administration skills.
• Scripting expertise in Python, PowerShell, or Bash, including strong knowledge of regular expressions.
• Experience designing and developing REST APIs for system integration.
• Ability to secure and monitor cloud-native workloads in AWS, Azure, or Google Cloud Platform.
• Understanding of cyber threat tactics, techniques, and procedures for developing alerting and threat hunting techniques.

Preferred Skills

• Bachelor’s degree in information technology, cybersecurity, or a related field.

Key Skills

Education

ANY GRADUATE