Job
Statement:

NopalCyber
makes cybersecurity manageable, affordable, reliable, and powerful for
companies that need to be resilient and compliant. Managed extended detection
and response (MXDR), attack surface management (ASM), breach and attack
simulation (BAS), and advisory services fortify your cybersecurity across both
offense and defense. AI -driven intelligence in our Nopal360° platform, our
NopalGo mobile app, and our proprietary Cyber Intelligence Quotient (CIQ) lets
anyone quantify, track, and visualize their cybersecurity posture in real -time.
Our service packages, which are each tailored to a client’s needs and budget,
and external threat analysis, which provides critical intelligence at no -cost,
help to democratize cybersecurity by making enterprise -grade defenses and
security operations available to organizations of all sizes. NopalCyber lowers
the barrier to entry while raising the bar for security and service.

Responsibilities:

- Design and develop
detection rules and policies to identify cybersecurity threats across a
wide range of platforms and technologies.

- Lead the design,
development, and deployment of high -fidelity threat detection mechanisms
across our diverse technology stack, including on -premise, cloud (AWS,
Azure, GCP), and SaaS environments.

- Collaborate with
security analysts, threat hunt, and threat intelligence to understand




emerging threats and devise effective detection strategies.

- Validate and tune
detection content to minimize false positives and ensure high accuracy and
efficiency.

- Stay update of the
latest cybersecurity trends, tools, and technologies to continuously
improve detection methodologies.

- Work directly
with clients to onboard their environments onto our platform and integrate
data sources, guiding them through the process.

- Document
detection processes, create reports on security metrics, and communicate
findings to stakeholders

- Good understand
on network infrastructure, security and devices i.e. Firewalls, EDR, Email
Security, Proxy, DLP, and IDS/IPS

Qualifications:

- Bachelor’s degree in
Computer Science, Information Security, or a related field.

- At least 5 years of
experience in cybersecurity, with a focus on threat detection, analysis,
and incident response

- Strong knowledge of




security information and event management (SIEM) systems, log management
solutions, and detection platforms.

- Familiarity with attack
patterns, tactics, techniques, and procedures (TTPs) used by cyber
adversaries - MITRE ATT@CK and Cyber Kill Chain

- Experience with cloud
security and understanding of cloud -based threat detection strategies.

- Strong communication
and collaboration skills, with the ability to work effectively in a team
environment and interact with clients

- Collaborate with
Security Operations team on developing and automating alert response
processes and playbooks

- Knowledge of security
tools and technologies, such as SIEM, CSPM, EDR/XDR, SOAR, WAF, and
IDS/IPS.

- Skilled security
certifications such as OSCP, GIAC (e.g. GCIH, GCIA), CISSP, or other
relevant certifications are highly valued.

- Hands -on experience
with SIEM platforms for log management and alerting. Ex: Splunk, Elastic
Stack (ELK/Security Onion), IBM QRadar, Securonix, Wazuh or Azure
Sentinel. Ability to create SIEM queries, dashboards, and integrate new
data sources