Technical Consultant-Threat Detection Response & Intelligence

About the role

This position involves using a variety of cybersecurity tools to monitor, prioritize, investigate, and respond to security incidents. Investigate security incidents using SIEM, SOAR, EDR, and XDR platforms, and apply industry frameworks like MITRE ATT&CK and the Cyber Kill Chain to understand and counter adversary tactics effectively.

What you'll do

• Work with leading companies across industries, helping them shape their hybrid cloud and AI journeys
• Manage Incident Reports: Prioritize and manage incident reports, providing actionable recommendations and responses to strengthen the client's security posture
• Analyze Network and Endpoint Events: Interpret security tools and logs from Windows, MAC, and Linux systems to identify potential threats
• Engage in Vulnerability Management: Participate in vulnerability management and cyber threat intelligence activities to identify and anticipate potential threats
• Provide Actionable Recommendations: Deliver recommendations and responses to clients to enhance their security posture

What you need

• Vulnerability assessment
• Linux
• SIEM
• Incident response
• Cloud security
• EDR

Good to have

• Bash
• Python
• PowerShell