Description

You will detect, investigate, and resolve security incidents across diverse client environments as a first responder.

This role is on-site.

Responsibilities

• Detect and investigate qualified security incidents within defined SLAs.
• Execute containment, mitigation, and remediation steps to resolve information security incidents.
• Conduct root cause analysis on complex malware and system behavior events.
• Gather and analyze forensic evidence to support cybersecurity investigations.
• Develop and document scalable incident response processes and procedures.

Required Skills

• 5+ years of experience in SIEM monitoring and cybersecurity incident response.
• Hands-on incident investigation using FW, IDS, PROXY, AD, EDR, and DLP.
• Proficiency with Windows, Active Directory, DNS, and Linux operating systems.
• Experience with SIEM tools such as QRadar or Sentinel.
• Knowledge of SOAR technologies and playbook execution using Cortex, Phantom, or Demisto.
• Experience using ITSM tools for incident management.
• Strong understanding of network analysis, threat detection, and log analysis.
• Competency in Cybersecurity Incident Response and FTK.
• Ability to work in a 24/7 environment on rotating shifts.

Key Skills

Education

Any Graduate