Join our dynamic cybersecurity team, dedicated to safeguarding organizations from cyberattacks and protecting critical assets. We focus on building resilient security postures by proactively preventing, detecting, and responding to threats. This role involves embedding cyber risk management into strategic development for effective information and technology risk handling.

This position offers a chance to contribute to advanced security operations, leveraging cutting-edge SIEM and EDR/XDR technologies. You will play a crucial role in incident handling, threat hunting, and ensuring the continuous improvement of our security protocols.

Act as a Security Incident Handler for high-impact cyber security incidents and advanced attacks, adhering to the Cyber Kill Chain methodology and established incident response processes.

Conduct thorough malware analysis and identify Indicators of Compromise (IOCs) to accurately assess incident scope and potential impact.

Enhance existing workflows and processes to drive more effective incident response and mitigation efforts.

Analyze logs from diverse sources, prioritizing and differentiating between potential intrusion attempts and false alarms.

Utilize attack frameworks like Kill Chain and MITRE ATT&CK for effective incident response and reporting.

Review and triage security alerts, providing detailed analysis and tracking remediation actions.

Requires 2-5 years of experience in SOC operations, incident response, threat monitoring, or cybersecurity investigations.

Must have working experience with SIEM technologies (LogRhythm, Splunk, Sentinel, Chronicle) and EDR/XDR solutions (CrowdStrike, Cortex XDR, Microsoft Defender).

Possess a strong understanding of fundamental security concepts, including cyber-attacks, threat vectors, risk management, and incident management.

Familiarity with network traffic analysis, including TCP/IP, routing, switching, and common protocols is essential.

Knowledge of Windows event log analysis and Recorded Future Fusion is expected.

Candidates must hold at least one valid certification: CompTIA Security+, CEH, ECSA, or a relevant OEM certification for SIEM or security monitoring tools.

A Bachelor’s or Master’s degree in Computer Science, Information Security, or a related field is required.

This role requires on-site presence at the office.