Description

You will monitor security infrastructure, analyze logs, and respond to incidents using enterprise SIEM platforms. You own the initial triage and detection workflow for potential threats.

Responsibilities

• Monitor and analyze security events using SIEM tools to identify anomalies and threats.
• Perform log analysis and correlate data to detect intrusion attempts and malicious activity.
• Execute incident response procedures for confirmed security breaches and policy violations.
• Investigate alerts from IDS/IPS and EDR tools to validate threat severity.
• Maintain network security baselines by monitoring TCP/IP, DNS, and firewall configurations.

Required Skills

• 3+ years of experience in security operations, monitoring, or incident response.
• Hands-on proficiency with Splunk, QRadar, or ArcSight.
• Strong understanding of network protocols (TCP/IP, DNS) and firewall mechanics.
• Experience operating IDS/IPS and Endpoint Detection and Response (EDR) tools.
• Ability to conduct deep-dive log analysis for threat detection.
• Graduate degree in any discipline.

Preferred Skills

• Exposure to threat intelligence feeds and analysis.
• Familiarity with security frameworks such as ISO 27001 or NIST.

Key Skills

Education

Any Gradute