Responsibilities:

·       Conduct in-depth investigations of security incidents to determine root cause and impact.

·       Perform advanced threat hunting to identify potential threats and vulnerabilities.

·       Analyze security logs and network traffic to identify suspicious activities.

·       Develop and implement countermeasures to mitigate security risks.

·       Manage and optimize security tools and technologies.

·       Contribute to the development and improvement of incident response plans.

·       Mentor and guide SOC L1 analysts.

·       Create reports and presentations on security incidents and trends.

·       Stay up to date on emerging threats and security best practices.

Work Experience and Knowledge Requirement:

·       Minimum 5+ years of experience is required.

·       Experience with scripting or programming languages (e.g., Python, PowerShell).

·       Knowledge of digital forensics and incident response.

·       Experience with security automation tools.

·       Strong understanding of networking, operating systems, and cybersecurity concepts.

·       Experience with security information and event management (SIEM) tools.

·       Proficiency in threat hunting and incident response methodologies.

·       Ability to analyze complex data sets and draw meaningful conclusions.

·       Strong problem-solving and critical thinking skills.

·       Excellent communication and interpersonal skills.

·       Ability to work independently and as part of a team. 

·       Ability to work in a fast-paced, 24/7 environment.

·       Strong written and verbal communication skills in English

·       Experience in operating system hardening to reduce attack surfaces.

Desired Skills

·       Knowledge of security standards and regulations (e.g., ISO 27001, ITIL, GDPR, CCPA).

·       Certifications in cybersecurity (e.g., Security+, Network+, CompTIA CySA+).

·       Experience with using Kali Linux

·       Experience with playbook development.

·       Understanding of Microsoft Security tools (M365/Azure)

·       Proficiency in Microsoft Sentinel, Microsoft Defender XDR suite

·       Malware reverse engineering