Description

You will own security monitoring, incident response, and threat hunting using Elastic and SIEM technologies.

This role is on-site.

Responsibilities

• Implement security monitoring rules, reports, and dashboards to ensure tool efficiency.
• Create threat hunting models for endpoints and network traffic.
• Analyze security events from endpoint logging, EDR, IPS, and DLP tools.
• Investigate security-related incidents involving malware, unauthorized activity, and APTs.
• Document standard operating procedures for the Incident Management Team.

Required Skills

• 5+ years of experience in security engineering or related roles.
• Hands-on experience building alerts, dashboards, and pipelines in Elastic.
• Proven experience creating security monitoring within a SIEM.
• Experience analyzing endpoint logging, detection, response, and forensic tools.
• Working knowledge of AWS, Azure, or GCP.
• Proficiency with IPS, WAF, PCAP, and Netflow tools.
• Strong analytical skills for investigating security breaches and tactical intelligence.

Preferred Skills

• Ability to work independently and manage multiple tasks simultaneously.

Key Skills

Education

ANY GRADUATE