Description

You will monitor, triage, and respond to security events across on-premises and cloud environments.

This role is on-site.

Responsibilities

• Monitor and analyze alerts from AWS Security Hub, GuardDuty, AWS Config, CloudTrail, and IAM Access Analyzer.
• Investigate and remediate security incidents in AWS using native security controls and forensic capabilities.
• Perform continuous monitoring and correlation of security data to detect unauthorized access or suspicious activity.
• Develop and refine SOC processes, procedures, and response playbooks to improve detection and mitigation.
• Prepare threat intelligence reports and provide actionable insights regarding cloud-based threats.

Required Skills

• 5+ years of experience in information security administration or equivalent.
• Proficiency with AWS-native security services and cloud-based threat landscapes.
• Hands-on experience with Linux/Unix and Microsoft Windows operating systems.
• Working knowledge of NIST security controls, specifically NIST SP800-53.
• Experience managing security platforms such as SIEM, Microsoft Defender for Endpoint, or Trend Micro Vision One.
• Familiarity with AWS Well-Architected Framework and regulatory standards like CIS and FedRAMP.
• Strong understanding of network technologies, defense strategies, and risk assessment policies.
• Proficiency in Microsoft Office suite and security workflow automation.

Preferred Skills

• Bachelor's degree in Computer Science or a related field.

Key Skills

Education

Bachelor's degree