Job description

Position Overview:

We are seeking a Cyber Security Operations Engineer with a strong background in security operations, threat detection, and incident response. The ideal candidate will have experience with advanced security technologies, including SIEM, SOAR, EDR, XDR, NDR, and more, to help defend against cyber threats and ensure the security of our digital assets. This role requires hands-on expertise with security tools such as McAfee ePO, Antivirus, EPP, DLP, and Data Classification technologies.

As a Cyber Security Operations Engineer, you will play a critical role in monitoring, detecting, and responding to security incidents, working closely with other security teams and stakeholders to protect the organization's infrastructure.

Key Responsibilities:

Security Monitoring & Incident Detection:

• Monitor security alerts and data from various security platforms (e.g., SIEM, NDR, EDR, XDR) to detect and respond to potential threats.
• Utilize SIEM tools (e.g., Splunk, ArcSight, QRadar) to aggregate, analyze, and correlate logs and events for threat detection and incident investigation.

Incident Response & Mitigation:

• Lead or participate in incident response activities, including analysis, containment, eradication, and recovery.
• Use SOAR platforms (e.g., Demisto, Phantom, Swimlane) to automate and orchestrate incident response workflows.
• Investigate security incidents across endpoints, networks, and applications and provide recommendations for remediation.

Threat Intelligence & Tuning:

• Leverage threat intelligence feeds and integrate them with SIEM/XDR platforms to enhance detection capabilities.
• Continuously tune and optimize security tools to improve detection and response times, minimizing false positives.

Security Tool Management & Optimization:

• Manage and fine-tune the configuration of security tools, including McAfee ePO, Antivirus, EPP (Endpoint Protection Platform), and DLP (Data Loss Prevention) solutions.
• Support the implementation and maintenance of network and endpoint security solutions (EDR, NDR, XDR).