Join our dynamic cybersecurity team as an Assistant Manager, specializing in Security Operations Center (SOC) and Security Information and Event Management (SIEM) for incident response and handling. You will play a crucial role in protecting organizations from cyber threats, ensuring vigilance, and building resilience. This position offers an opportunity to manage cyber risk effectively and contribute to strategic information and technology security initiatives. Explore the exciting world of Cybersecurity with us.

This role is ideal for professionals passionate about proactive threat detection and effective incident management. You will work with cutting-edge SIEM and EDR/XDR technologies to safeguard critical assets and respond to advanced cyber attacks.

Your primary responsibilities will involve reviewing and triaging information security alerts, providing in-depth analysis, and managing remediation efforts. You'll be instrumental in identifying genuine security incidents, configuring monitoring tools, and maintaining robust incident response processes and documentation (Run Book).

Key duties include acting as a Security Incident Handler for high-impact events, conducting malware analysis, and identifying Indicators of Compromise (IOCs) to assess incident scope. You will also be responsible for enhancing incident response workflows, performing threat hunting, and analyzing logs across various sources to differentiate between real threats and false alarms.

We are seeking an Assistant Manager with 4-6 years of experience in SOC incident response and handling. A strong background in SIEM technologies such as LogRhythm, Splunk, Sentinel, or Chronicle is essential, along with experience in EDR/XDR solutions like CrowdStrike or Microsoft Defender.

Candidates should possess a fundamental understanding of network traffic analysis, cybersecurity concepts, and attack frameworks like Cyber Kill Chain and MITRE. A Bachelor’s or Master’s degree in Computer Science, Information Security, or a related field is required. Professional certifications such as CompTIA Security+, ECSA, GCFA, GCFE, or CISSP are highly desirable. This is an onsite role requiring presence in the office.