Roles and Responsibilities

Monitor network traffic, system logs, and security alerts to identify potential security incidents and unauthorized activities in a timely manner
Design, deploy, and manage threat detection rules and preventive security controls to safeguard critical systems and data in response to the latest threat landscape
Perform in-depth analysis of security events to determine the nature and scope of potential security incidents and recommend risk mitigation strategies. When necessary, carry out digital forensic for reporting and auditing purposes
Contribute in threat hunting exercises or cyber projects to improve overall security posture

Qualifications & Experience

Technical know-how and experience in solutions such as but not limited to:
Network Security (F/W, IPS, VPN, NAC) - Fortigate, Palo Alto
Web Security (WAF, Web isolation) - Cloudflare, Zscaler, Microsoft
Endpoint Security (EDR, AV, DLP) - Crowdstrike, Microsoft
Threat Monitoring - Qradar, GoogleSec Ops, Resilient, Claroty
Vulnerability Management – Tenable, Ivanti, Microsoft
Cloud Security – Microsoft, Palo Alto
Identity Management - Microsoft, CyberArk
Threat Hunting and Simulation – Cymulate, Crowdstrike
Minimum 3 years of relevant experience in SOC environment

Wymagane umiejętności

Security Event and Network Traffic MonitoringSecurity Incident Analysis and ScopingThreat Detection Rule DevelopmentPreventive Security Controls ManagementDigital ForensicsRisk Mitigation Strategy DevelopmentThreat HuntingNetwork Security (Firewalls, IPS, VPN, NAC)Web Security (WAF and Web Isolation)Endpoint Security (EDR, Antivirus, DLP)Security Information and Event Management (QRadar, Google SecOps)Vulnerability ManagementCloud SecurityIdentity and Access Management

Podobne stanowiska