Description

You will manage threat detection, incident response, and proactive threat hunting within a SOC environment.

This role is on-site.

Responsibilities

• Execute proactive threat hunting to identify and neutralize emerging threats.
• Configure and fine-tune security tools by integrating log sources and data feeds.
• Develop and refine correlation rules within SIEM to detect complex attack patterns using the MITRE framework.
• Analyze user behaviors and network traffic to identify anomalies and suspicious activities.
• Integrate threat intelligence feeds into security tools.

Required Skills

• 5+ years of experience in a SOC environment focusing on threat detection and incident response.
• Extensive experience with Palo Alto Cortex XDR and practical application of XQL queries.
• Proficiency with Splunk (SIEM), Cortex (EDR), and IDS/IPS tools like Snort or Suricata.
• Strong scripting skills in Python and PowerShell for security automation.
• Deep knowledge of DNS, network protocols, firewalls, VPNs, and WAFs.
• Ability to use machine learning and behavioral analytics to identify threats.

Preferred Skills

• Experience in the Biotech or Pharma industry.

Key Skills

Education

Any Graduate