Qualifications

• 5-7 years of experience in cybersecurity or SOC roles.
• Strong knowledge of SOC operations and the incident response lifecycle.
• Familiarity with the Cyber Kill Chain, threat vectors, and threat intelligence.
• Proficient in network security technologies including firewalls and SIEM.
• Hands-on experience with Linux and Windows system administration.
• Competence in security log analysis and reporting technologies.
• Cybersecurity certifications such as GCIA, GCIH, or Security+ are advantageous.

Responsibilities

• Monitor SOC alerts to detect potential threats.
• Triage alerts using threat intelligence feeds and eliminate false positives.
• Generate custom reports and dashboards for investigations.
• Collaborate with customers and forensic teams to manage security incidents.
• Follow and improve incident response playbooks and procedures.
• Update detection use cases for new threats from raw logs.
• Automate repetitive triage steps by updating playbooks.

Benefits

• Working remotely with a follow-the-sun approach for global coverage.
• Structured work schedule of 5 days per week with a mix of weekdays and weekends.
• Opportunities for continuous learning and professional development.
• Exposure to cutting-edge cybersecurity technologies and tools.
• Joining a dynamic team focused on enhancing client security postures.