Information Security Specialist - QRadar/Crowdstrike

Key Responsibilities :

- Monitor, analyze, and investigate security alerts and incidents using QRadar SIEM or CrowdStrike platforms.

- Develop and fine-tune correlation rules, dashboards, and use cases for threat detection.

- Conduct threat hunting, malware analysis, and endpoint detection to proactively identify risks.

- Lead incident response activities including containment, eradication, and recovery.

- Collaborate with IT and Security teams to design and implement security controls.

- Perform root cause analysis of security incidents and provide actionable remediation recommendations.

- Ensure compliance with security frameworks, standards, and best practices.

- Generate detailed security reports and metrics for management and stakeholders.

- Support continuous improvement in SOC processes, playbooks, and automation.

- Stay current with emerging threats, vulnerabilities, and security technologies.

Technical Skills Required :

- Strong expertise in QRadar SIEM or CrowdStrike EDR/XDR.

- Proficiency in threat detection, incident response, and log analysis.

- Knowledge of network security, endpoint security, and malware analysis.

- Familiarity with MITRE ATT&CK framework and threat intelligence.

- Experience with Windows/Linux environments, Active Directory, and cloud platforms (Azure, AWS, GCP).

- Hands-on skills with security tools (IDS/IPS, vulnerability scanners, firewalls).

- Knowledge of scripting or automation (Python, PowerShell, or similar) is a plus.

Experience :

- Minimum 8+ years of experience in information security, SOC operations, or cybersecurity roles.

- Proven experience in SIEM (QRadar) or EDR/XDR (CrowdStrike) platforms.

- Demonstrated expertise in handling complex security incidents and leading incident response.

- Experience working in enterprise environments with security compliance requirements.

Education :

- Bachelors degree in Computer Science, Information Security, Cybersecurity, or related field.

- Industry certifications preferred : CISSP, CISM, CEH, CompTIA Security+, CrowdStrike Certified Falcon Administrator, QRadar SIEM certification