Description

Investigate and triage cybersecurity alerts, manage SIEM monitoring, and respond to security events using established procedures.

This role is on-site.

Responsibilities

• Monitor SIEM systems, system consoles, and shared mailboxes for security threats.
• Investigate and triage cybersecurity alerts and escalations.
• Respond to security events following established processes and procedures.
• Conduct Splunk queries and create visualizations for threat analysis.

Required Skills

• 5+ years of experience in security operations.
• Proficiency with Splunk queries and visualizations.
• Working knowledge of cybersecurity controls.
• Understanding of networking protocols.
• Experience with Anti-Virus (AV) and Endpoint Detection Response (EDR).
• Familiarity with proxy technologies.

Preferred Skills

• Certifications such as GCIH, CCNA, CEH, or CISSP.

Key Skills

Education

Any Graduate