Roles & Responsibilities

• Monitor security alerts and events using SIEM tools, identifying potential threats and anomalies in real-time.
• Investigate security incidents, performing in-depth analysis to determine the scope, impact, and root cause.
• Respond to security incidents by executing established playbooks, containing threats and mitigating further damage.
• Analyze network traffic and system logs for suspicious activities and indicators of compromise (IOCs).
• Develop and refine threat detection rules and signatures to improve the accuracy and efficiency of security monitoring.
• Collaborate with IT and security teams to implement security controls and remediation strategies.
• Stay updated on the latest cyber threats, vulnerabilities, and attack vectors to proactively defend the organization.
• Conduct vulnerability assessments and penetration testing to identify and report security weaknesses.
• Participate in threat hunting exercises to proactively search for and neutralize advanced persistent threats (APTs).
• Generate detailed incident reports, documenting findings, actions taken, and recommendations for improvement.
•