Engineer I, Security Operations

Job Summary Responsibilities

• Security Monitoring: Continuously monitor security alerts from various sources (e.g., SIEM, IDS/IPS, firewalls, antivirus tools) to identify potential security incidents.
• Triage and classify security incidents based on established criteria. Determine the severity and potential impact of security incidents.
• Execute initial response procedures for security incidents, including containment, eradication, and recovery efforts. Escalate incidents to higher-level analysts or management as necessary.
• Review and analyse logs from multiple sources to identify unusual patterns or activities that may indicate a security threat.
• Stay updated on current threat landscapes and emerging cyber threats. Utilise threat intelligence feeds and reports to enhance monitoring capabilities.
• Phishing identification and escalation
• Data Loss Prevention (DLP)
• Vulnerability Response

Required Skills

• Minimum 2 years of experience working with event monitoring and management, preferably in a global SOC setting
• Knowledge of Log management tools and solutions (Splunk, Qradar, etc)
• Knowledge of the Operating system (Windows, Linux and macOS)-good to have skill
• Good knowledge of networking and endpoint detection tools (Sophos, Rapid7 and any NDR/EDR tools)
• Good communication and presentation skills
• Experience working in a fast-paced globally dispersed environment
• Good Analytical, problem-solving, and Interpersonal skills

Educational Qualifications

• BE/B. Tech Computer Science or similar
• Security certifications (Security+ or similar)
• SSCP, or other is beneficial

What happens next

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.