Description

You will provide technical leadership for the delivery team, focusing on L3 incident resolution and vulnerability lifecycle management.

Responsibilities

• Lead L3 incident resolution and coordinate SOC efforts across multiple business units during active responses.
• Execute threat hunting exercises using threat intelligence and anomalous log data analysis to detect threats.
• Manage the administration, content, and lifecycle of SIEM and Log Management platforms.
• Develop and execute standard procedures for vulnerability management frameworks and operational documentation.
• Drive automation initiatives and conduct proof-of-concept reviews for new security products.
• Author postmortem reports for senior leadership following intrusions or red team engagements.

Required Skills

• 8+ years of experience in security operations and vulnerability management.
• Hands-on experience with 2 or more vulnerability assessment tools and lifecycle management.
• Proficiency in Qualys, Tenable, Rapid7, or MS Defender for VM and policy compliance scanning.
• Experience with EDR platforms, threat analysis, and incident response.
• Knowledge of the MITRE framework and equivalent security models.
• Experience performing vulnerability assessments on cloud-based architectures using Prisma Cloud or Wiz.io.
• Hands-on experience in SIEM analysis and use case management.
• Ability to script using Python, Perl, Bash, or Shell.
• Experience evaluating Email Security solutions including SPF and DKIM.
• Capability to work in a 24x7 environment.

Preferred Skills

• Knowledge of CSPM and ASM tools.

Key Skills

Education

Any Graduate