Join our dynamic cybersecurity team as a Consultant specializing in Security Operations Center (SOC), SIEM, and Incident Response. You will play a crucial role in defending organizations against cyberattacks and safeguarding critical assets. This position offers the opportunity to work on cutting-edge security challenges and contribute to building resilient cyber defenses.

We focus on integrating cyber risk management into strategic development, ensuring robust protection of information and technology assets. Become part of a team dedicated to preventing, detecting, and responding to sophisticated cyber threats, enabling businesses to explore new opportunities securely.

Key responsibilities include performing in-depth analysis of SIEM alerts to identify and triage genuine security incidents. You will maintain and enhance security incident process documentation, acting as a primary handler for high-impact cyber security incidents and advanced attacks. This involves conducting malware analysis, identifying Indicators of Compromise (IOCs), and enhancing incident response workflows.

You'll also be responsible for log analysis across various sources, differentiating between intrusion attempts and false alarms. A core part of the role involves utilizing attack frameworks like Cyber Kill Chain and MITRE for effective incident response and reporting, and proactively informing teams to minimize false positives.

We are seeking a professional with 2-5 years of experience in SOC operations, incident response, threat monitoring, or cybersecurity investigations. Proficiency in SIEM technologies such as LogRhythm, Splunk, Sentinel, or Chronicle, as well as EDR/XDR solutions like CrowdStrike, Cortex XDR, or Microsoft Defender, is essential.

A strong understanding of fundamental network traffic analysis, Windows event log analysis, and security concepts including cyber-attacks, threat vectors, and risk management is required. Familiarity with attack frameworks like Cyber Kill Chain and MITRE is highly desirable. A Bachelor’s or Master’s degree in Computer Science, Information Security, or a related field is expected, with relevant certifications being a significant advantage.