SOC Detection and Response - Engineer Cyber Security Engineer

About the role

Identifies potential network, system and information vulnerabilities. Develops and implements solutions to mitigate risks and enhance system security. Provides consultation to organizations on security issues. Performs security investigation and computer forensic analysis. Performs penetration testing, security-focused system architecture review, incident response planning and execution.

What you'll do

• Perform initial investigation and enrichment activities to determine alert validity, scope, and potential business impact
• Analyze endpoint, network, identity, and cloud security telemetry to identify indicators of compromise and suspicious activity
• Assist with containment and response activities under the direction of senior analysts and incident response personnel
• Manage assigned investigations through completion, including evidence collection, analysis, documentation, and timely escalation when required
• Use frameworks such as MITRE ATT&CK to understand adversary tactics, techniques, and procedures

What you need

• 2–3 yrs of experience
• Incident response
• SIEM
• Network security
• Linux
• EDR
• Cloud security
• Any graduate

Good to have

• Splunk
• Python
• PowerShell
• Bash
• Penetration testing