We are seeking a skilled cybersecurity professional to join our team, responsible for the continuous monitoring, response, and tuning of various security tools including SIEM, EDR, Firewall, IDS/IPS, and other related technologies. The role involves detecting, investigating, containing, and responding to cybersecurity incidents to protect organizational assets. The ideal candidate will have strong analytical skills to assess logs, alerts, and threat intelligence, ensuring timely and effective incident management. Accurate documentation, reporting, and escalation in accordance with standard operating procedures (SOP) are critical components of this position.
Key Responsibilities
- Continuously monitor and fine-tune security tools such as SIEM, EDR, Firewall, IDS/IPS to optimize threat detection and response capabilities.
- Detect, investigate, and contain cybersecurity incidents promptly to minimize impact on the organization.
- Analyze logs, alerts, and threat intelligence data to identify potential security threats and vulnerabilities.
- Document all incidents thoroughly, prepare detailed reports, and escalate issues following established SOPs.
- Collaborate with cross-functional teams to improve security posture and incident response processes.
- Stay updated on the latest cybersecurity trends, threats, and technologies to enhance monitoring and response strategies.
Required Qualifications
- Proven experience in cybersecurity monitoring and incident response, particularly with SIEM, EDR, Firewall, IDS/IPS, and other security tools.
- Strong analytical skills for log and alert analysis, as well as interpreting threat intelligence data.
- Ability to document incidents clearly and follow escalation protocols effectively.
- Familiarity with cybersecurity frameworks, incident response methodologies, and SOP adherence.
- Excellent communication skills to report findings and coordinate with relevant stakeholders.
Preferred Qualifications and Benefits
- Certifications such as CISSP, CISM, CEH, or equivalent are highly desirable.
- Experience working in a fast-paced security operations center (SOC) environment.
- Knowledge of advanced threat detection techniques and emerging cybersecurity technologies.
- Opportunities for professional growth and development within a dynamic cybersecurity team.
- Exposure to cutting-edge security tools and participation in ongoing training programs.
Interested candidates are encouraged to apply by 22-Nov-2026.