Description

You will lead technical investigations and threat hunting within an enterprise network or SOC environment.

Responsibilities

• Investigate security events and incidents to gather and analyze evidence.
• Evaluate, respond to, and mitigate alerts from SIEM and other security tools.
• Hunt for suspicious and malicious threats within the environment.
• Identify false positives and suggest tuning to reduce alert fatigue.
• Collaborate with the internal Security Incident Response Team (SIRT) during investigations.

Required Skills

• 10 or more years of professional experience in Information Security.
• Experience in a SOC, MSS, or enterprise network environment.
• Proficiency with Windows security architecture, Active Directory, and system hardening.
• Knowledge of attack vectors, including SQL Injection and cross-site scripting (XSS).
• Familiarity with the OWASP Top 10 and SANs top 20 critical security controls.
• Experience monitoring EDR, Anti-Virus (AV), and Host Based Intrusion Prevention (HIPS).
• Understanding of malware propagation, root causes, and mitigation in enterprise environments.
• Knowledge of network and system-based attacks, including DoS, brute force, and data exfiltration.

Preferred Skills

• Experience with Incident Ticketing Systems.
• Security certifications such as GCIA, CISSP, or similar.
• Experience with SIEM platforms.

Key Skills

Education

Any Graduate