This is a excellent opportunity to work as part of a highly regarded team to deliver leading-edge solutions.
Responsibilities
- Security operations analyst who triages and investigates alerts in a 24x7 setting and also writes, tunes and retires the detection rules, across on-premises and cloud logs.
SKILLS
Must have
- * SIEM rule-writing * Alert triage and investigation * Detection engineering and tuning * EDR, NDR, firewall logs * Cloud log analysis and IAM anomalies * MITRE ATT&CK; * Experience: 5+ years in security operations at medium/large enterprises, though the client skills block says 4-6 years.
Nice to have
- Scripting - PowerShell, Bash, Python * Automation and AI workflows in detection pipelines * Containerized and serverless workloads * Playbooks and SOPs * Technical writing