Job Description

Roles & Responsibilities

• Monitor security alerts and events using SIEM tools, identifying potential threats and anomalies in real-time.
• Investigate security incidents, performing in-depth analysis to determine the scope, impact, and root cause.
• Respond to security incidents by executing established playbooks, containing threats and mitigating further damage.
• Analyze network traffic and system logs for suspicious activities and indicators of compromise (IOCs).
• Develop and refine threat detection rules and signatures to improve the accuracy and efficiency of security monitoring.
• Collaborate with IT and security teams to implement security controls and remediation strategies.
• Stay updated on the latest cyber threats, vulnerabilities, and attack vectors to proactively defend the organization.
• Conduct vulnerability assessments and penetration testing to identify and report security weaknesses.
• Participate in threat hunting exercises to proactively search for and neutralize advanced persistent threats (APTs).
• Generate detailed incident reports, documenting findings, actions taken, and recommendations for improvement.

Desired Candidate Profile

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field.
• Possession of industry-recognized certifications such as CompTIA Security+, CEH, or GIAC.
• Minimum of 2-3 years of hands-on experience in a Security Operations Center (SOC) environment.
• Proficiency in analyzing security logs from various sources (firewalls, IDS/IPS, endpoints, cloud).
• Strong understanding of networking protocols, operating systems, and common attack methodologies.
• Experience with Security Information and Event Management (SIEM) tools (e.g., Splunk, QRadar, LogRhythm).
• Effective communication skills, both written and verbal, to articulate complex technical issues.
• Excellent analytical and problem-solving skills with meticulous attention to detail.
• Ability to work under pressure and in a fast-paced incident response environment.
• Proactive and curious mindset with a passion for continuous learning in cybersecurity.