Description

Act as the escalation point for L1 triage, managing incidents, service requests, and project tasks. Own the incident response and resolution lifecycle within defined SLAs using analytical troubleshooting.

Responsibilities

• Manage incident response and resolution within defined SLAs using analytical troubleshooting.
• Perform vulnerability assessments and validate or exclude vulnerabilities based on client requirements.
• Configure, maintain, and troubleshoot SIEM, IDR, and MDR environments.
• Detect security events and perform threat analysis through log, network, malware, and device analysis.
• Create, review, and maintain Standard Operating Procedures and technical documentation.

Required Skills

• 4-6 years of experience in security operations or incident response.
• Hands-on experience with Vulnerability Management applications including Qualys and Rapid7.
• Proficiency in SIEM/IDR/MDR tools such as Splunk, AWN, and Rapid7 InsightIDR.
• Ability to create vulnerability management dashboards and trending reports.
• Experience validating log sources and optimizing search criteria within indexed data.
• Skill in eliminating false positive alerts through security event detection.
• Experience performing environment upgrades based on technical documentation.

Preferred Skills

• Experience with monitoring tools including SolarWinds and LogicMonitor.
• Background working with Managed Services or IT Services companies.

Key Skills

Education

Any Graduate