Description

Monitor, detect, and respond to security incidents within an SPC environment while automating SOC operations.

You will own the 24/7 security monitoring lifecycle, from initial detection through remediation and automation.

Responsibilities

• Monitor SIEM systems to detect incidents and anomalies, investigating root causes and managing remediation.
• Develop Python automation scripts and workflows to improve incident response and playbook execution.
• Conduct in-depth log analysis to identify indicators of compromise (IOCs).
• Create and maintain incident response plans and participate in tabletop simulations.
• Mentor analysts on detection and response techniques and generate SLI/SLO metrics.

Required Skills

• 5+ years of relevant security experience.
• Strong Python automation skills to streamline security workflows.
• Proficiency in Linux, including security hardening for web applications and databases.
• Experience managing and securing PostgreSQL and MariaDB.
• Hands-on experience with SIEM and SOAR tools.
• Foundational knowledge of network routers, switches, and firewalls.
• Ability to work in a 24/7 environment, including weekends, holidays, and on-call rotations.

Preferred Skills

• Cloud experience with AWS, Azure, or GCP.
• Experience with Kubernetes.

Key Skills

Education

Any Graduate