Description

You will own hands-on incident investigation and support, acting as a primary contact for management.

Responsibilities

• Participate in incident response and investigation for escalated security events.
• Track, document, and close post-incident response action items.
• Perform network and system forensics across on-premise and cloud environments (AWS and Azure).
• Optimize and customize security monitoring tools to improve detection capabilities.
• Lead and train junior incident responders on incident investigation and resolution steps.

Required Skills

• 7+ years of hands-on experience in cybersecurity incident response or threat detection.
• Expertise in incident response tools (SIEM, EDR, IDS/IPS, Firewalls).
• Deep understanding of operating systems: Windows, Linux, and macOS, including security mechanisms.
• Experience with cloud security and incident response in AWS and Azure.
• Solid knowledge of network protocols and architecture.
• Ability to automate tasks using scripting languages such as Python, PowerShell, Perl, or Bash.
• Experience understanding attacker Tactics, Techniques, and Procedures (TTPs) for threat hunting.
• Ability to articulate complex technical concepts to technical and non-technical audiences.

Key Skills

Education

Any Gradute