Description

Manage security operations in a 24x7 global Information Security Operations Center. Own the resolution of infrastructure issues impacting the Cyber Threat Fusion Center and support CSIRT activities for incident mitigation and remediation.

Responsibilities

• Assess security information to identify sensor or tool issues, including case floods, false positives, and sensor anomalies.
• Conduct correlation analysis across internal and external data sources to identify information security incidents.
• Support Computer Security Incident Response Team (CSIRT) activities, including mitigation and remediation.
• Participate in network vulnerability scans, security audits, and risk assessments to ensure policy compliance.

Required Skills

• 7+ years of cyber security experience specifically in Security Operations.
• 6+ years of experience with enterprise SIEM solutions.
• Practical understanding of the cyber kill chain, MITRE framework, and NIST framework.
• Advanced knowledge of networks, protocols, standards, and Linux, Unix, or Windows OS internals.
• Proficiency in at least one scripting language: PowerShell, Python, Bash, or PHP.
• Demonstrated experience in security incident response, mitigation, and remediation methodologies.

Preferred Skills

• CISSP, OSCP, or CEH certifications.

Key Skills

Education

Any Graduate