Description

Monitor security alerts and events to analyze threats, investigate incidents, and manage response processes from detection to resolution.

This role is on-site.

Responsibilities

• Perform real-time analysis of security threats, incidents, and anomalies across SIEM and other security tools.
• Investigate security events to determine severity, impact, and required response actions.
• Conduct threat hunting activities to identify potential vulnerabilities or suspicious patterns.
• Manage incident response processes from detection to resolution and create detailed documentation.

Required Skills

• 12+ years of experience in cybersecurity or SOC operations.
• Hands-on experience with SIEM tools: Splunk, QRadar, ArcSight, Sentinel.
• Proficiency in scripting languages: Python, PowerShell, Bash.
• Deep understanding of network security, firewalls, IPS/IDS, endpoint security, and vulnerability management.
• Knowledge of attack techniques, malware behavior, and threat frameworks (MITRE ATT&CK, Cyber Kill Chain).
• Experience with incident response methodologies and digital forensics.
• Strong analytical, problem-solving, and documentation skills.

Preferred Skills

• Ability to work independently under pressure and manage multiple incident priorities.
• Excellent communication skills for cross-functional collaboration.

Key Skills

Education

Any Gradute