1. SOC Operations & Incident Response
- Support day-to-day SOC monitoring, alert analysis, triage, and incident investigation.
- Analyze security events across SIEM, endpoint, network, cloud, and security platforms.
- Support incident response, containment, evidence collection, and root-cause analysis.
- Assist with SOC use-case development, tuning, and false-positive reduction.
2. SIEM Engineering & Threat Detection
- Support SIEM administration, log-source onboarding, parsing, correlation, and monitoring.
- Develop and fine-tune detection rules, alerts, dashboards, and security use cases.
- Identify logging and monitoring gaps across critical systems.
- Support integration of security platforms with SIEM and SOC workflows.
3. Threat Hunting & Threat Intelligence
- Perform proactive threat hunting based on IOCs, TTPs, and identified attack patterns.
- Support threat-intelligence analysis and IOC validation.
- Map relevant detection and hunting activities to MITRE ATT&CK techniques.
- Recommend new detection scenarios based on emerging threats.
4. Vulnerability Assessment & Penetration Testing
- Support vulnerability assessments and penetration testing across infrastructure, applications, APIs, and external-facing assets.
- Validate identified vulnerabilities and assess technical security impact.
- Coordinate vulnerability remediation with infrastructure and application teams.
- Perform remediation validation and security retesting.
5. Security Architecture & Technical Assurance
- Review infrastructure, network, cloud, and application designs from a cybersecurity perspective.
- Assess firewall rules, network connectivity, external exposure, and security controls.
- Participate in technical security reviews for new projects and changes.
- Provide technical security recommendations based on identified risks.
Key Skills & Qualifications
- Bachelor’s degree in Cybersecurity, IT, Computer Science, or related field.
- Strong hands-on experience in SOC operations, SIEM, incident response, and threat hunting.
- Experience with platforms such as Splunk, , Microsoft Defender, CrowdStrike, Trend Micro, or similar technologies.
- Practical knowledge of VAPT tools and techniques such as Burp Suite, Nessus/Tenable, Nmap, OWASP testing methodologies, or equivalent.
- Good understanding of MITRE ATT&CK, OWASP Top 10, incident response, network security, and security monitoring.
- 3-5 years' experience.
