JD:

Strong knowledge of SOC processes: monitoring, triage, incident response, escalation

Hands‑on experience with SIEM tools (Splunk, QRadar, Sentinel, ArcSight, etc.)

Hands‑on experience with SOAR platforms (Cortex XSOAR, Splunk SOAR, IBM SOAR, etc.)

Incident Response & Threat Analysis (MITRE ATT&CK;, kill chain, IOC analysis)

Experience with security tool integration (EDR, IDS/IPS, Email Security, Firewall)

Strong scripting/automation skills (Python, PowerShell, or Bash)

Experience in playbook development and automation workflows

Valuable understanding of network, endpoint, and cloud securityExperience in use‑case development, alert tuning, and false‑positive reduction

Knowledge of cloud security platforms (Azure, AWS, GCP)

Exposure to EDR/XDR tools (CrowdStrike, Defender, SentinelOne, Palo Alto Cortex)

Experience with vulnerability management tools (Qualys, Tenable, Rapid7)

Security certifications: GCIA,



GCIH, GCED, CEH, CISSP, Azure Security (preferred)

Experience in client-facing roles and handling audits or compliance requirements

Familiarity with DevSecOps and API-based integrations

Desired skills

Experience in use‑case development, alert tuning, and false‑positive reduction

Knowledge of cloud security platforms (Azure, AWS, GCP)

Exposure to EDR/XDR tools (CrowdStrike, Defender, SentinelOne, Palo Alto Cortex)

Experience with vulnerability management tools (Qualys, Tenable, Rapid7)

Security certifications: GCIA, GCIH, GCED, CEH, CISSP, Azure Security (preferred)

Experience in client-facing roles and handling audits or compliance requirements

Familiarity with DevSecOps and API-based integrations

📌 Cybersecurity Consultant (Pune)
🏢 Trigent Software
📍 Pune