Description

Manage investigation and triage of cybersecurity alerts, notifications, and escalations.

Responsibilities

• Monitor SIEM systems, system consoles, and shared mailboxes for security threats.
• Investigate and triage cybersecurity alerts and escalations.
• Respond to security events following established processes and procedures.
• Conduct Splunk queries and create visualizations for threat analysis.

Required Skills

• 5+ years of experience in security operations.
• Proficiency with Splunk queries and visualizations.
• Working knowledge of cybersecurity controls.
• Understanding of networking protocols.
• Experience with Anti-Virus (AV) and Endpoint Detection Response (EDR).
• Familiarity with proxy technologies.
• BS in Computer Science or a security-related field.

Preferred Skills

• Certifications such as GCIH, CCNA, CEH, or CISSP.

Key Skills

Education

Any Graduate