Cybersecurity Analyst

Project description

This is a great opportunity to work as part of a highly regarded team to deliver leading-edge solutions.

Responsibilities

• Security operations analyst who triages and investigates alerts in a 24x7 setting and also writes, tunes and retires the detection rules, across on-premises and cloud logs.

SKILLS

Must have

• * SIEM rule-writing * Alert triage and investigation * Detection engineering and tuning * EDR, NDR, firewall logs * Cloud log analysis and IAM anomalies * MITRE ATT&CK * Experience: 5+ years in security operations at medium/large enterprises, though the client skills block says 4-6 years.

Nice to have

* Scripting - PowerShell, Bash, Python * Automation and AI workflows in detection pipelines * Containerized and serverless workloads * Playbooks and SOPs * Technical writing