What you will bring

• Relevant experience: Three to five years of experience in information security, security operations, incident response, or an equivalent hands-on role.
• Investigation capability: Proven experience triaging and investigating cybersecurity events and incidents, prioritizing effectively and working confidently in a time-sensitive environment.
• Technical depth: Hands-on experience across SIEM or XDR, EDR, email security, web proxy and digital forensics and incident response.
• Cloud and data skills: Experience investigating AWS, Azure or GCP environments and working with SPL, KQL, SQL or comparable query languages.
• Proactive defense: Practical threat-hunting experience; red or purple team exposure is advantageous.
• Automation mindset: Ability to automate with Python, PowerShell, Bash, or similar technologies and identify opportunities to reduce repetitive operational work.
• Influence and communication: Strong written and verbal communication, documentation, and stakeholder engagement skills, with the ability to explain technical issues clearly and support other analysts.
• Growth mindset: Curiosity, continuous learning, and a track record of improving tools, processes, and team capability.

Training and Certifications: A bachelor’s degree in cybersecurity, computer science, engineering or equivalent practical experience is preferred. Certifications such as GCIH, GCFA, or comparable credentials are advantageous.