Description

You will manage security monitoring and incident response using the Elastic stack.

Responsibilities

• Implement security monitoring rules, reports, and dashboards to ensure SIEM efficiency.
• Monitor security systems and investigate incidents related to malware, unauthorized activity, and APTs.
• Develop threat hunting models for endpoints and network traffic.
• Analyze endpoint and network data using EDR, IPS, DLP, WAF, and Netflow tools.
• Collaborate with Incident and Threat Management teams to execute detection and mitigation controls.

Required Skills

• 3 years of experience in security operations.
• Experience creating alerts, dashboards, and pipelines within Elastic.
• Experience implementing security monitoring within a SIEM.
• Proficiency analyzing endpoint logging, detection, response, and forensic tools.
• Hands-on experience with EDR and IPS.
• Knowledge of Firewall Engineering.
• Working knowledge of AWS, Azure, or GCP.
• Bachelor’s Degree.

Key Skills

Education

Bachelor’s Degree