Description :

- Utilize your expertise in IT security, security operations, and incident response to build, operate, and enhance our extended security orchestration and automation (XSOAR) tool, ensuring swift and effective handling of incidents and ongoing protection of organizational assets.

- Handle and coordinate tasks such as incident management, threat hunting, forensic analysis, and remediation efforts to mitigate threats. Conduct regular assessments to identify vulnerabilities and insecure configurations and review security change requests to ensure robust protective measures.

- Configure and monitor security tools, including alerts, correlation rules, and reporting mechanisms. Implement automation and orchestration to improve the efficiency and effectiveness of security monitoring and response processes, aiming for a unified "single pane of glass" solution.

- Leverage intelligence to apply threat monitoring and vulnerability detection to evaluate and respond effectively to events and developing risk severity level and mitigation approaches, incorporating feedback and lessons learned into enhanced preventive and detective controls.

- Stay updated on the latest security practices and technologies, mentor the team through knowledge-sharing sessions, and build strong relationships with internal tech groups to ensure strategic alignment and foster collaboration.

- Develop work product(s) and support small projects, threat assessments, and incident investigations while managing deadlines, expectations, and contributing to staffing decisions.

Required Qualifications :

- Bachelors degree with 2-5 years of experience in cybersecurity operations with experience implementing processes and playbooks in cybersecurity monitoring and incident response activities using XSOAR products.

- Experience with scripting or automation, and ServiceNow is a plus.

- Excellent verbal/written English communication, collaboration, analytical and presentation skills effectively communicate risk, technical information, and host meetings effectively in a matrixed environment.

- Ability to participate in development of resource plans and project estimation.

Preferred Qualifications :

- Relevant certifications include CISSP, CCSP, CCSK, GSEC, GCIH, GCFE, GCFA, SC-200, CEH, and AZ-900