Responsibilities

Monitor security alerts, logs, and events using SIEM and other security monitoring tools

Investigate and respond to cybersecurity incidents and potential threats

Perform threat analysis and identify suspicious or malicious activities

Analyze security logs from servers, endpoints, firewalls, applications, and network devices

Support incident response, containment, investigation, and remediation activities

Perform vulnerability assessments and assist with vulnerability remediation

Monitor endpoint security and investigate endpoint-related alerts

Conduct basic threat hunting and security investigations

Identify security risks and recommend appropriate remediation measures

Assist with security audits, compliance activities, and security assessments

Maintain accurate documentation of security incidents, investigations, and procedures

Collaborate with IT, infrastructure, network, application, and other teams to resolve security issues

Stay current with emerging cybersecurity threats, vulnerabilities, and attack techniques

Qualification

Represents the skills you have

Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.

CybersecuritySecurity OperationsIncident ResponseSIEMMicrosoft SentinelSplunkIBM QRadarEDR/XDREndpoint SecurityNetwork SecurityFirewallsVPNsIDS/IPSDNSTCP/IPHTTP/HTTPSSecurity Log AnalysisThreat AnalysisVulnerability ManagementSecurity Risk AssessmentRequired

Strong understanding of cybersecurity concepts, security operations, and incident response

Experience with SIEM platforms such as Microsoft Sentinel, Splunk, IBM QRadar , or similar

Knowledge of EDR/XDR solutions and endpoint security

Understanding of network security concepts, including firewalls, VPNs, IDS/IPS, DNS, TCP/IP, and HTTP/HTTPS

Experience analyzing security logs and investigating security alerts

Knowledge of common cyber threats, vulnerabilities, malware, phishing, and attack techniques

Understanding of vulnerability management and security risk assessment

Strong analytical and problem-solving skills

Good written and verbal communication skills