About this role
Roles & responsibilities
Advanced Incident Response
· Lead the investigation, containment, eradication, and recovery of high-severity cybersecurity incidents. · Perform root cause analysis for security breaches and provide remediation recommendations. · Coordinate response activities with IT, infrastructure, cloud, application, and business teams. · Support crisis management and major incident response activities.
Security Monitoring & Escalation
· Serve as the final escalation point for complex security alerts and incidents. · Validate and triage advanced threats, malware, ransomware, insider threats, and APT activity. · Provide technical guidance to L1/L2 analysts during investigations.
Security Automation & SOAR
· Develop and improve SOAR playbooks and automated response workflows. · Identify opportunities to reduce manual effort through automation. · Support integration of security tools and threat intelligence feeds.
Threat Intelligence
· Leverage threat intelligence sources to enrich investigations. · Analyze Indicators of Compromise (IOCs), Indicators of Attack (IOAs), and Tactics, Techniques, and Procedures (TTPs). · Translate threat intelligence into actionable detections and defense improvements.
Governance & Reporting
· Create executive and technical incident reports. · Participate in security audits and compliance assessments. · Support SOC metrics reporting, KPIs, SLAs, and continuous improvement initiatives.
Educational Qualifications:
• Bachelor's degree in Computer Science, Information Security, Cybersecurity, Information Technology, Engineering, or a related field. • Master's degree in Cybersecurity, Information Security, or related discipline is preferred. • Minimum 8 years of experience in Security Operations Center (SOC), Incident Response, or Cyber Defense operations. • Experience working in a 24x7 SOC environment supporting enterprise-scale security monitoring and incident management.
Roles & responsibilities
Advanced Incident Response
· Lead the investigation, containment, eradication, and recovery of high-severity cybersecurity incidents. · Perform root cause analysis for security breaches and provide remediation recommendations. · Coordinate response activities with IT, infrastructure, cloud, application, and business teams. · Support crisis management and major incident response activities.
Security Monitoring & Escalation
· Serve as the final escalation point for complex security alerts and incidents. · Validate and triage advanced threats, malware, ransomware, insider threats, and APT activity. · Provide technical guidance to L1/L2 analysts during investigations.
Security Automation & SOAR
· Develop and improve SOAR playbooks and automated response workflows. · Identify opportunities to reduce manual effort through automation. · Support integration of security tools and threat intelligence feeds.
Threat Intelligence
· Leverage threat intelligence sources to enrich investigations. · Analyze Indicators of Compromise (IOCs), Indicators of Attack (IOAs), and Tactics, Techniques, and Procedures (TTPs). · Translate threat intelligence into actionable detections and defense improvements.
Governance & Reporting
· Create executive and technical incident reports. · Participate in security audits and compliance assessments. · Support SOC metrics reporting, KPIs, SLAs, and continuous improvement initiatives.
Educational Qualifications:
• Bachelor's degree in Computer Science, Information Security, Cybersecurity, Information Technology, Engineering, or a related field. • Master's degree in Cybersecurity, Information Security, or related discipline is preferred. • Minimum 8 years of experience in Security Operations Center (SOC), Incident Response, or Cyber Defense operations. • Experience working in a 24x7 SOC environment supporting enterprise-scale security monitoring and incident management.