Description

You will execute cyber-security incident detection and response functions within Security Services.

Responsibilities

• Respond to cyber-security threats, vulnerabilities, events, and incidents as a technical contributor during major security events.
• Improve operational maturity through playbook development, automation, and process refinement.
• Develop detection strategies including attack models, use cases, and tuning.
• Participate in the planning and execution of purple teaming activities.
• Support internal stakeholders and projects as required.

Required Skills

• 5+ years of experience in incident response methodologies and techniques.
• Experience working in a CSOC or CIRT performing Level 2 or Level 3 support.
• Proficiency in detecting and mitigating malware, DDoS, phishing, lateral movement, and data exfiltration.
• Hands-on experience with Azure, AWS, or Google Cloud platforms.
• Technical knowledge of Windows, Linux, Active Directory, DNS, DHCP, web proxies, SMTP, and TCP/IP.
• Ability to perform malware analysis and reverse engineering using static and dynamic analysis.
• Operational experience with Splunk, Crowdstrike, Microsoft Defender, FireEye, or Akamai.
• Experience performing vulnerability assessments and penetration testing across network, infrastructure, and applications.
• Familiarity with the Lockheed Martin Cyber Kill Chain or similar frameworks.

Key Skills

Education

Any Graduate