Description

Lead security monitoring, detection, and incident response across on-premises and cloud environments.

This role is on-site.

Responsibilities

• Strategize and conduct monitoring using logs from endpoint, network, server, and identity systems.
• Deploy cloud-centric detection to identify threats within AWS, Azure, and GCP environments.
• Correlate activity across assets and environments to identify patterns of anomalous activity.
• Review sensor alerts, document technical incident reports, and manage SIEM detection content.
• Provide incident response support, including containment actions and facilitating forensic analysis.

Required Skills

• 3+ years of experience as an incident responder, red teamer, security engineer, or SOC analyst.
• Hands-on experience with AWS, Azure, and GCP security features and capabilities.
• Proficiency in security automation tools and techniques to improve SOC efficiency.
• Experience in project management for implementing security tools or developing policies.
• Knowledge of identity, network, systems, endpoint, and SIEM systems.
• Strong proficiency in written and spoken English.
• 5+ years of total working experience.

Preferred Skills

• Knowledge of SOAR platforms and security orchestration.
• Proven ability in troubleshooting and complex problem-solving.

Key Skills

Education

Any Graduate