Requirements

Key Responsibilities

• Monitor security alerts and events using SIEM tools.
  
• Perform initial triage and analysis of security incidents.
  
• Investigate suspicious activities, malware alerts, phishing attempts, and unauthorized access attempts.
  
• Classify and prioritise security incidents based on severity.
  
• Escalate confirmed incidents to L2/L3 SOC Analysts or Incident Response teams.
  
• Monitor endpoint security solutions including EDR/XDR platforms.
  
• Analyse firewall, VPN, IDS/IPS, proxy, authentication, and endpoint logs.
  
• Respond to phishing emails and perform email header analysis.
  
• Execute predefined incident response playbooks and SOPs.
  
• Maintain accurate documentation of incidents and actions taken.
  
• Create and update incident tickets within ITSM/Ticketing tools.
  
• Generate daily security monitoring reports.
  
• Support vulnerability management and patch verification activities.
  
• Ensure compliance with SLAs and incident response timelines.
  
• Participate in 24x7 rotational shifts.
  

Preferred Knowledge

• Security Operations Center (SOC) processes
  
• Incident Response lifecycle
  
• Cybersecurity Frameworks (NIST, ISO 27001)
  
• OWASP Top 10
  
• Vulnerability Assessment concepts
  
• Email Security
  
• Endpoint Detection & Response (EDR)
  
• Identity and Access Management (IAM)
  
• Multi -Factor Authentication (MFA)
  

Benefits

• Health insurance coverage for Father, Mother, Self, Spouse, and Kids.
  
• Long -term benefit savings plan with employer matching contributions.
  
• Opportunities for professional development and advancement within the organization.