Description

You monitor global networks, triage security incidents, and lead response efforts to minimize business impact.

This role is on-site.

Responsibilities

• Triage and prioritize security alerts from SIEM, phishing, and DLP platforms based on severity and scope.
• Conduct root cause analysis, containment, and recovery for anomalous or malicious activities.
• Analyze host and network artifacts to reconstruct incident timelines and identify indicators of compromise.
• Generate weekly and monthly reports, dashboards, and metrics (KPIs/KRIs) for technical and executive audiences.
• Refine detection rules to reduce false positives and maintain incident response playbooks.

Required Skills

• 5+ years of experience in security operations or incident response.
• Hands-on experience with SIEM tools, threat intelligence platforms, and endpoint detection.
• Ability to analyze host-based and network-based logs for timeline reconstruction.
• Experience defining and reporting on security metrics, KPIs, and KRIs.
• Knowledge of GRC frameworks, regulatory mandates, and audit requirements.
• Strong documentation skills for legally defensible evidence collection.
• Bachelor's degree in Computer Science, Information Security, or related field.

Preferred Skills

• Experience in the financial services industry.
• Familiarity with cross-functional tabletop exercises and red/blue team simulations.

Key Skills

Education

Bachelor's degree