Description

You will own the end-to-end handling of security incidents from detection through remediation.

Responsibilities

• Drive incident resolution by monitoring, triaging, and investigating security events using SIEM, EDR, and network visibility tools to contain threats.
• Develop and maintain detection content and automation scripts (Python/Bash) to improve response efficiency and reduce false positives.
• Ensure forensic integrity by applying investigative practices to gather and preserve evidence throughout the incident lifecycle.
• Communicate decisive action and insights regarding security events to both technical and non-technical stakeholders.

Required Skills

• 6+ years executing end-to-end incident response and SOC functions, including real-time triage and containment.
• Expert proficiency utilizing Security Incident and Event Management (SIEM) platforms and Endpoint Detection and Response (EDR) tools.
• Deep technical knowledge of network protocols, common cybersecurity attack methodologies, and digital forensic processes.
• Proven ability to apply scripting languages (Python, Bash) to automate security tasks and build custom detection logic.
• Knowledge of cloud security principles across AWS, Azure, or GCP.
• Track record translating complex security events into clear, actionable steps for diverse teams.

Key Skills

Education

Any Graduate