Join our dynamic team as a Cybersecurity Engineer, playing a crucial role in safeguarding our digital assets. This position focuses on the frontline defense of our security infrastructure, involving continuous monitoring and initial response to threats.

You will be the first line of defense, meticulously examining security alerts and ensuring the integrity of our systems. Your contributions will be vital in maintaining a secure environment for our organization and clients.

Your primary responsibility will be the continuous monitoring of SIEM, EDR, IDS/IPS, firewalls, and log sources for any suspicious activities. You will conduct initial triage and classification of alerts based on their severity, scope, and potential impact.

Furthermore, you will escalate validated incidents to L2 SOC analysts following established playbooks. Ensuring the accuracy of log ingestion and forwarding across various security platforms is also key. You will maintain detailed incident records and contribute to improving our security playbooks by documenting false positives and suggesting enhancements.

A key aspect of this role involves acting as the initial point of contact for customer-reported security incidents. You'll perform preliminary analysis of suspicious emails, URLs, and attachments, adhering strictly to MSSP and customer-specific SLA-driven workflows.

Experience with vulnerability management is essential, as you will review vulnerability scan reports and escalate high-severity findings. Additionally, you will assist in preparing daily/weekly SOC dashboards, reports, and key metrics for management and clients, contributing to overall security posture awareness.