Description

You will manage risk mitigation and remediation of internal and external security threats through advanced threat analysis and incident response.

This role is on-site.

Responsibilities

• Respond to and remediate email, endpoint, threat intelligence, and network-based threats while providing forensic investigation support.
• Perform security event correlation, triage, and analysis to identify compromised applications, networks, systems, or users.
• Implement threat analysis using industry-standard frameworks such as the Kill Chain and Diamond Model.
• Operate security technologies including SIEM, SOAR, threat intelligence platforms, EDR, IDS/IPS, and Zero Trust tooling.
• Maintain operational playbooks, process diagrams, and tactical threat intelligence reports.

Required Skills

• 5+ years of experience in security operations or incident response.
• Proficiency in Python programming and general scripting tasks.
• Experience with AWS and/or Azure cloud environments.
• Hands-on experience with SIEM, SOAR, and EDR tools.
• Strong understanding of defense-in-depth security best practices and architecture concepts.
• Ability to perform forensic investigations and apply threat intelligence during active incidents.
• Experience managing security monitoring, response, and threat reporting workflows.
• Ability to provide after-hours support for response activities as needed.

Preferred Skills

• Experience with advanced email protection and cloud security products.

Key Skills

Education

Any Graduate