Description

You will monitor, investigate, and respond to security threats within a security operations environment.

Responsibilities

• Monitor network, system, and security logs using SIEM tools to identify and prioritize potential threats in real-time.
• Triage security incidents, assisting in the containment, eradication, and recovery of affected systems.
• Conduct root cause analysis of security events and contribute to post-incident reports.
• Maintain and optimize SOC technologies, including SIEM, EDR, and IDS/IPS.
• Collaborate with infrastructure and network teams to improve logging and visibility.
• Support compliance efforts related to frameworks such as ISO 27001, NIST, and PCI-DSS.

Required Skills

• 1–3 years of experience in a SOC or cybersecurity operations role.
• Proficiency with SIEM platforms including Splunk, AlienVault, or IBM QRadar.
• Strong understanding of networking fundamentals: TCP/IP, DNS, HTTP, and VPNs.
• Working knowledge of Windows and Linux operating systems.
• Understanding of malware and common attack vectors.
• Ability to analyze logs, alerts, and reports to detect cyberattacks or anomalies.
• Strong analytical and problem-solving skills.
• Bachelor’s degree in Cybersecurity, IT, Computer Science, or equivalent work experience.

Key Skills

Education

Any Graduate