Job Description :

Incident Response :

- Investigate and respond to security incidents, including malware infections, data breaches, and network intrusions.

- Perform root cause analysis to determine the origin and impact of incidents.

- Collaborate with other IT teams to contain and remediate security threats.

Monitoring and Analysis :

- Monitor security alerts and logs from various security tools, including SIEM (Security Information and Event Management) systems, IDS/IPS (Intrusion Detection/Prevention Systems), firewalls, and antivirus software.

- Conduct in-depth analysis of security events to identify potential threats and vulnerabilities.

- Create and update security incident reports and documentation.

Threat Hunting and Intelligence :

- Proactively hunt for potential threats within the organization's network and systems.

- Stay up to date with the latest threat intelligence, security news, and vulnerabilities.

- Implement threat intelligence feeds and indicators of compromise (IOCs) into security monitoring tools.

Security Tools and Technologies :

- Manage and maintain security tools and technologies, including endpoint protection, network security devices, and vulnerability management systems.

- Assist in the deployment and configuration of new security solutions.

- Ensure security tools are properly tuned and optimized for accurate threat detection.

Compliance and Policy Enforcement :

- Assist in the development and enforcement of security policies, procedures, and standards.

- Ensure compliance with relevant regulations and industry standards (e.g., GDPR, HIPAA, ISO 27001).

- Participate in security audits and assessments.

Reporting and Documentation :

- Prepare detailed reports on security incidents, findings, and remediation efforts.

- Maintain accurate and up-to-date documentation of security processes and procedures.

- Present security metrics and analysis to senior management.

Qualifications :

Education :

- Bachelor's degree, Information Security, or a related field. Relevant work experience in security area.

Certifications :

- Relevant certifications such as CompTIA Security+, CISSP, CISM certifications.

Experience :

- 3-5 years of experience in a cybersecurity role, with a focus on incident response and security monitoring.

- Hands-on experience with security tools and technologies (e.g., SIEM, IDS/IPS, firewalls, endpoint protection, Sentinel one , Darktrace ,BitSight, Intune etc).

Skills :

- Strong analytical and problem-solving skills.

- Knowledge of networking protocols, operating systems, and common vulnerabilities.

- Experience with scripting and automation (e.g., Python, PowerShell) is a plus.

- Excellent communication and interpersonal skills.

(ref:hirist.tech)

Taggd

More Information