Description

You own the first-response workflow for security incidents and real-time threat detection.

This role is on-site.

Responsibilities

• Monitor and analyze security events using SIEM, EDR, and network security tools.
• Correlate logs from operating systems, databases, applications, cloud environments, and networks to triage incidents.
• Analyze attacker tactics, techniques, and procedures (TTPs) to improve detection capabilities.
• Develop custom SIEM content, security tool tuning, and incident response playbooks.
• Conduct vulnerability scans and participate in tabletop exercises to improve response processes.

Required Skills

• 5+ years of experience in security monitoring and incident response.
• Hands-on experience with IDS/IPS, SIEM, EDR, DLP, Firewalls, and DNS security.
• Proficiency in Windows and Linux operating systems.
• Experience with cloud security and threat intelligence implementation.
• Knowledge of the NIST Cybersecurity Framework (CSF) and MITRE ATT&CK.
• Ability to manage ticket escalations and coordinate response across engineering and management teams.
• Strong network and hardware knowledge.
• Ability to write clear incident updates for non-technical staff and upper management.

Preferred Skills

• Strong background in digital forensics.

Key Skills

Education

Any Graduate