Job Description (JD):
Solid SOC and Incident Response knowledge
Minimum 3+ years of hands on experience in Splunk.
Good knowledge on detection engineering and creating use cases.
Positive to have knowledge in Spam/phishing email analysis
Participate in daily SOC meetings to discuss about raised incidents.
Performing real-time monitoring, security incident handling, investigation, analysis, reporting and escalations of security events from multiple log sources.
Hands on experience in CrowdStrike EDR.
Identify the frequently trigerring False positive/Benign cases and provide the tuning feedback.
Must-Have
Strong SOC, Incident Response and Detection Engineering knowledge with valuable communication skills. Minimum 3+ years of handson experience in Splunk(SIEM).