Description

You will proactively identify, investigate, and document rogue IP addresses across enterprise environments to maintain network integrity.

Responsibilities

• Monitor network traffic and logs to detect unauthorized or suspicious IP addresses.
• Investigate alerts and anomalies involving unauthorized devices, misconfigured endpoints, or external threats.
• Collaborate with network and security teams to isolate and remediate rogue IPs in real time.
• Document all findings, actions, and resolutions in ServiceNow to ensure traceability and compliance.
• Maintain and update ServiceNow workflows and templates for IP incident tracking.
• Participate in threat hunting exercises and contribute to detection rules and response playbooks.
• Support audits and compliance reviews by providing logs and reports from monitoring tools.

Required Skills

• 8+ years of experience in network security or related roles.
• Proficiency with Splunk for log analysis and monitoring.
• Experience using Wireshark for network traffic investigation.
• Hands-on experience with SolarWinds.
• Strong working knowledge of ServiceNow for incident documentation and workflow management.
• Ability to track and document findings for audit and remediation purposes.
• Experience investigating unauthorized device activity and endpoint misconfigurations.

Key Skills

Education

Any Gradute