Security operations analyst

About the role

In this role, you will play a key part in strengthening enterprise cybersecurity through security operations engineering, threat detection, and automated incident response. You will design, deploy, and maintain security integrations across SIEM, SOAR, endpoint protection, and multi-cloud environments.

What you'll do

• Develop and continuously improve SOAR playbooks for automated incident triage, enrichment, and response
• Manage detection rules, correlation policies, dashboards, and alert thresholds while optimizing detection accuracy and reducing false positives
• Maintain technical documentation, integration runbooks, playbook specifications, and change records in accordance with established change management procedures
• Maintain Falcon integrations with SIEM platforms, validate endpoint detection alerts
• Multi-Cloud Security Integration: Configure and maintain security log collection across AWS, Microsoft Azure, and Google Cloud Platform

What you need

• Incident response
• SIEM
• EDR
• Cloud security
• Firewalls
• IAM
• Any graduate

Good to have

• AWS
• GCP
• Azure
• Office 365