Job Responsibilities
- Monitor network traffic, systems, and security alerts to identify potential threats.
- Identify, analyze, and investigate cybersecurity incidents.
- Monitor security logs and detect suspicious activities.
- Perform vulnerability assessments and security risk analysis.
- Assist in identifying and resolving security vulnerabilities.
- Monitor and respond to phishing attacks, malware, and other cyber threats.
- Support incident response and security investigation activities.
- Maintain security documentation and incident reports.
- Assist in implementing security policies, procedures, and controls.
- Conduct regular security audits and compliance checks.
- Work with IT teams to improve network and system security.
- Stay updated on the latest cybersecurity threats, vulnerabilities, and trends.
Required Technical Skills
- Basic knowledge of cybersecurity concepts and principles.
- Understanding of networking protocols such as TCP/IP, DNS, HTTP, and HTTPS.
- Knowledge of firewalls, VPNs, and network security.
- Understanding of operating systems such as Windows and Linux.
- Knowledge of vulnerability assessment and risk management.
- Basic understanding of malware, phishing, and cyberattacks.
- Knowledge of SIEM tools such as Splunk, QRadar, or Microsoft Sentinel.
- Familiarity with security monitoring and incident response.
- Basic knowledge of encryption and authentication mechanisms.
- Understanding of security frameworks such as ISO 27001 and NIST.
Preferred Skills
- Knowledge of penetration testing fundamentals.
- Familiarity with tools such as Wireshark, Nmap, and Nessus.
- Basic knowledge of Python or scripting.
- Understanding of SOC operations and threat intelligence.
- Knowledge of cloud security concepts (AWS, Azure).
- Relevant cybersecurity certifications such as Security+, CEH, or Google Cybersecurity Certificate.
Soft Skills
- Strong analytical and problem-solving skills.
- Good communication and documentation skills.
- Attention to detail.
- Ability to work independently and in a team.
- Strong troubleshooting and investigation skills.
- Willingness to learn new security technologies.
Key Performance Indicators (KPIs)
- Security incident detection and response time.
- Vulnerability identification and remediation.
- Accuracy of security monitoring.
- Compliance with security policies.
- Incident reporting and documentation.
- Overall improvement in organizational security.
Tools & Technologies
- SIEM Tools: Splunk, IBM QRadar, Microsoft Sentinel
- Network Tools: Wireshark, Nmap
- Vulnerability Scanning: Nessus, OpenVAS
- Operating Systems: Windows, Linux
- Security Frameworks: ISO 27001, NIST
- Cloud Platforms: AWS, Microsoft Azure
