This is a great prospect to work as part of a highly regarded team to deliver leading-edge solutions.
Responsibilities
Security operations analyst who triages and investigates alerts in a 24x7 setting and also writes, tunes and retires the detection rules, across on-premises and cloud logs.
Skills
Must have
SIEM rule-writing
Alert triage and investigation
Detection engineering and tuning
EDR, NDR, firewall logs
Cloud log analysis and IAM anomalies
MITRE ATT&CK;
Experience: 5+ years in security operations at medium/large enterprises, though the client skills block says 4-6 years.
Nice to have
Scripting
PowerShell, Bash, Python
Automation and AI workflows in detection pipelines