Key Responsibilities
- Monitor security alerts and events through SIEM tools.
- Identify, investigate, and analyze potential security threats.
- Monitor network traffic, endpoints, and system activities.
- Perform initial analysis and classification of security incidents.
- Investigate phishing emails, malware alerts, and suspicious activities.
- Analyze security logs and identify unusual patterns.
- Escalate critical security incidents to senior security teams.
- Support incident response and threat mitigation activities.
- Perform vulnerability assessments and security monitoring.
- Maintain incident reports and security documentation.
- Follow established security policies and procedures.
- Collaborate with IT and cybersecurity teams to improve security operations.
Required Technical Skills
- Basic knowledge of cybersecurity concepts and principles.
- Understanding of networking protocols such as TCP/IP, DNS, HTTP, and HTTPS.
- Knowledge of SIEM tools such as Splunk, IBM QRadar, or Microsoft Sentinel.
- Understanding of firewalls, IDS, and IPS.
- Knowledge of Windows and Linux operating systems.
- Basic understanding of malware analysis and phishing attacks.
- Familiarity with endpoint detection and response (EDR) tools.
- Understanding of security incident management and threat intelligence.
- Knowledge of vulnerability management concepts.
- Familiarity with MITRE ATT&CK framework.
Required Soft Skills
- Strong analytical and problem-solving abilities.
- Attention to detail and critical thinking.
- Good verbal and written communication skills.
- Ability to work under pressure and handle security incidents.
- Teamwork and collaboration skills.
- Willingness to learn emerging cybersecurity technologies.
Preferred Qualifications
- Experience working in a Security Operations Center (SOC).
- Knowledge of threat hunting and security incident investigation.
- Familiarity with EDR and XDR solutions.
- Understanding of vulnerability assessment tools.
- Basic knowledge of scripting using Python or PowerShell.
- Familiarity with security frameworks such as NIST and ISO 27001.
- Understanding of incident response procedures.
