Description

Manage complex security escalations and drive incident resolution within the SOC.

This role is on-site.

Responsibilities

• Respond to escalations from tier 1 and 2 analysts, providing guidance on resolving complex security incidents.
• Analyze potential security incidents using forensic analysis and incident response methodologies to determine impact and scope.
• Develop and refine incident response procedures, playbooks, and escalation protocols for log collection, root cause analysis, and threat containment.
• Conduct regular network, endpoint, and log analysis using SIEM, IPS, firewall, EDR, and advanced malware detection consoles.
• Lead interactions with workstation, network, server, and cloud teams to drive response and project work forward.

Required Skills

• 4+ years of experience in Cyber Security Operations, including 2+ years in higher SOC tiers.
• Experience working within cloud environments including AWS, GCP, or Azure.
• Proficiency in digital forensics tactics, tools, and techniques.
• Working knowledge of SIEM, log analysis, triaging, and cyber threat intelligence.
• Strong understanding of endpoint, networking, and server operations.
• Scripting experience with Python, Perl, or bash.
• Bachelor's degree in IT, InfoSec, Computer Science, or a related discipline.

Preferred Skills

• Relevant IT Security certifications such as GMON, GCTI, GNFA, GCWN, GREM, or OSCP.
• Prior experience working with malware labs or sandboxes.

Key Skills

Education

ANY GRADUATE