Description

You will manage security incident investigations and proactive threat hunting in a 24/7 onsite environment.

Responsibilities

• Investigate security incidents involving network traffic, IAM violations, and unauthorized access.
• Analyze security detection rules, alerts, and correlation logic to identify malicious activity.
• Conduct proactive threat hunting to identify potential threats within the environment.
• Execute incident response efforts including containment, eradication, and recovery.
• Onboard customers and guide them through MDR platform integrations.

Required Skills

• 3+ years of experience in cybersecurity operations and advanced threat detection.
• Hands-on experience with SIEM, SOAR, or MDR platforms such as Splunk or QRadar.
• Proficiency with endpoint security tools like CrowdStrike.
• Experience with cloud environments including AWS, Azure, and GCP.
• Strong scripting skills using Python and Bash.
• Working knowledge of SQL and database querying.
• Experience applying threat hunting methodologies.
• Ability to work in a 24/7 on-call rotation.
• Effective written and verbal communication skills.

Preferred Skills

• Knowledge of the MITRE ATT&CK framework.
• Relevant cybersecurity certifications.

Key Skills

Education

Any Graduate