Description

You will lead advanced technical investigations and forensics across malware, phishing, CASB, network, and configuration compliance domains.

Responsibilities

• Investigate and mitigate security incidents to contain and eradicate threats following defined procedures.
• Escalate complex investigations to the CSIRT in coordination with the SOC Manager.
• Collaborate with threat hunting and intelligence teams to build proactive searches and signatures in the SIEM.
• Review Tier 1 and Tier 2 incident investigations to ensure quality and coach junior analysts.
• Develop recommendations for SOC workflow improvements, including automation and process optimization.

Required Skills

• 5+ years of information security or technology experience, preferably in a SOC or NOC.
• 4+ years of experience using various operating systems and industry-standard monitoring, logging, alerting, and investigation processes.
• 2+ years of incident response experience.
• Bachelor's Degree in Computer Science, Engineering, Information Systems, Cyber Security, or equivalent.
• CompTIA Network+ and CompTIA Security+ certifications.
• GCIA, GCIH, or GREM certifications.

Key Skills

Education

Bachelor's Degree