Roles and Responsibilities:
Hands on experience of incident analysis malware research, SOC, or any other similar security incident response experience.
Hands on Experience with any SIEM Solution (LogRhythm, Qradar, Splunk, etc)
Fundamental understanding of security tools such as IDS/IPS, web proxies, DLP, CASB, DNS security, DDoS protection, firewalls, and cloud alerts/events
Knowledge of NIST and MITRE ATTCK security frameworks
Knowledge of Microsoft Windows systems including active directory and Unix/Linux systems
Experience analyzing and inspecting log files, network packets, and any other security tool information output from multiple system types
Familiar with basic reverse engineering principles and understand of malware, rootkits, TCP/UDP packets, network protocols
Team-oriented and skilled in working within a team-oriented environment
Ability to effectively multi-task, prioritize and execute tasks in a high-pressure workplace
Required flexibility to work in a 24x7 workplace.
Experience with technical analysis of email headers, links, and attachments to determine if an email is malicious, and then executing remediation techniques to protect the environment.