Join our Security Operations Center (SOC) as a Technical Specialist and play a crucial role in defending against sophisticated cyber threats. This position focuses on the technical aspects of cybersecurity operations, including incident response, threat detection, and the strategic application of security frameworks and tools.

As a key member of the SOC team, you will be instrumental in maintaining a robust security posture for our clients. Your expertise will directly contribute to identifying and mitigating risks, ensuring the integrity and availability of critical systems and data.

Handle security incidents and data breaches, including ransomware and malware attacks.

Apply deep understanding of cybersecurity concepts like Blue Teaming, MITRE ATT&CK, Cyber Kill Chain, and NIST CSF.

Identify and triage security alerts, differentiating between genuine threats and false positives.

Utilize SIEM platforms and understand SOC operational workflows.

Monitor, detect, and respond to threats within customer environments using our advanced SOC platform.

Optimize threat detection rules to minimize false positives and enhance productivity for both general and specific customer needs.

Implement and maintain knowledge of EDR platforms, such as Crowdstrike.

Develop and maintain Standard Operating Procedures (SOPs) for SOC Security Services.

Stay current with the latest cybersecurity trends and developments.

Act as an escalation point for SOC Security Analysts, providing expert guidance on security events and potential threats.

Generate regular reports for stakeholders and internal operational use.

Expand detection coverage by analyzing and integrating data from new sources and technologies.

Contribute to enhancing malware analysis capabilities and executing malware triage.

Create and update documentation to support ongoing operational needs.

A minimum of 4-6 years of overall experience in cybersecurity is required.

Demonstrate strong knowledge of concepts such as Blue Teaming, Purple Teaming, Threat Hunting, EDR, and SIEM.

Possess hands-on experience with EDR solutions (e.g., Crowdstrike, Sophos) and SIEM systems (e.g., Splunk, Microsoft Sentinel).

Exhibit a solid understanding of security operations, processes, and procedures, with a focus on incident response and threat intelligence.

Ability to collaborate effectively on a global scale and contribute to team development.

Familiarity with common and emerging malware types, attacker tools, and techniques is essential.

Maintain a strong awareness of the current global threat landscape.

Include practical experience with installing, configuring, or tuning security technologies such as Cyber Security Analytics, Secure Web Gateways, endpoint protection (EPP/AV/HIDS), EDR (e.g., Crowdstrike Falcon), DLP/FIM, SSL Certificate Managers, and VPN/encryption.

Azure Security or AWS Security certifications are considered a significant advantage.