Monitor and triage security alerts from various platforms to validate incidents and determine their business impact. Conduct end-to-end investigations into cybersecurity threats and document findings with remediation recommendations.

Requirements

Requires 3-5 years of cybersecurity experience with a strong understanding of the incident response lifecycle. Must have hands-on experience with SIEM, EDR/XDR, and cloud logs from Azure or GCP.

Experience

2 to 5 years

Working hours

40 hours per week

Job type

Full-time

Work arrangement

On-site

Skills

Incident Response
SIEM
EDR/XDR
Log Analysis
Threat Hunting
KQL
SOAR
Cloud Security
Phishing Investigation
Malware Analysis
Root Cause Determination
IOC Identification

Visa sponsorship

Not detected in the job text

Keywords

SIEM
EDR
XDR
Azure
GCP
KQL
SOAR
Phishing
Malware
Ransomware
Insider Threat
Data Exfiltration
IOC
Threat Hunting
Incident Response Lifecycle
Cybersecurity
SOC
Cloud Security

Original job description

Responsibilities:

Monitor, assess, and triage security alerts and events from SIEM, EDR/XDR, email security, cloud security, and other monitoring platforms.
Validate security incidents and determine severity, scope, and business impact.
Conduct end-to-end investigations of cybersecurity incidents including phishing, malware, ransomware, account compromise, insider threat, unauthorized access, data exfiltration, and cloud-related incidents
Document investigative findings, timelines, indicators of compromise (IOCs), and remediation recommendations.
Contribute to use case development, threat hunting, and IOC enrichment where needed.

Required Skills:

3–5 years of cybersecurity experience, with at least 2–3 years in incident response, SOC, or cyber investigations.
Strong understanding of the incident response lifecycle: preparation, identification, containment, eradication, recovery, and lessons learned.
Hands-on experience with common incident categories such as phishing, malware, endpoint compromise, suspicious authentication activity, privilege misuse, and cloud security events
Hands-on experience with:
SIEM, EDR/XDR, Identity & cloud logs (Azure, GCP)
Strong skills in log analysis, IOC identification, and root cause determination
Experience documenting incidents and producing actionable remediation guidance
Experience performing Threat hunting using KQL or other query languages, SOAR/playbook automation

Apply by Oct 13, 2026

Apply About employer

Details last changed Sep 15, 2026. About these details

Report this job