Roles and Responsibilities

Monitor network traffic, system logs, and security alerts to identify potential security incidents and unauthorized activities in a timely manner
Design, deploy, and manage threat detection rules and preventive security controls to safeguard critical systems and data in response to the latest threat landscape
Perform in-depth analysis of security events to determine the nature and scope of potential security incidents and recommend risk mitigation strategies. When necessary, carry out digital forensic for reporting and auditing purposes
Contribute in threat hunting exercises or cyber projects to improve overall security posture

Qualifications & Experience

Technical know-how and experience in solutions such as but not limited to:
Network Security (F/W, IPS, VPN, NAC) - Fortigate, Palo Alto
Web Security (WAF, Web isolation) - Cloudflare, Zscaler, Microsoft
Endpoint Security (EDR, AV, DLP) - Crowdstrike, Microsoft
Threat Monitoring - Qradar, GoogleSec Ops, Resilient, Claroty
Vulnerability Management – Tenable, Ivanti, Microsoft
Cloud Security – Microsoft, Palo Alto
Identity Management - Microsoft, CyberArk
Threat Hunting and Simulation – Cymulate, Crowdstrike
Minimum 3 years of relevant experience in SOC environment

Erforderliche Kompetenzen

Network traffic monitoringSecurity log and event analysisDesign and deployment of threat detection rulesManagement of preventive security controlsDigital forensics for incident reporting and auditingThreat hunting and simulationIncident analysis and risk mitigation recommendationsNetwork security (Firewalls, IPS, VPN, NAC)Web security (WAF, Web isolation)Endpoint security (EDR, AV, DLP)Vulnerability managementIdentity and access management (Microsoft, CyberArk)

Ähnliche Stellen