Analyze security alerts across SIEM/XDR/EDR; investigate L1 alerts.
Conduct incident triage, containment, and escalation to L3; coordinate with customers.
Proactive threat hunting and continuous monitoring of logs and network data.
Manage and tune security tools (SIEM/XDR/SOAR); develop playbooks.
Collaborate with internal teams and customers for incident handling and communication.
Document incidents and provide after-action reports to improve SOC processes.

🎯 Requirements

Bachelor’s degree in CS/IT/Cybersecurity or related field.
3+ years in security operations, SIEM, or IT security.
Hands-on with SIEM tools (Splunk/ArcSight/QRadar), EDR/IDS/IPS.
Strong knowledge of IT infra, networking, and security fundamentals.
Excellent communication, problem-solving, and attention to detail.
Relevant certifications (CISSP/CISM/GCIA/GCIH) preferred.
Experience with modern SIEM platforms and SOAR; cloud security.

Apply on employer's website

This employer gathers applications via their own applicant tracking system.

You will be redirected to an external application form.

Share job

Meet JobCopilot: Your Personal AI Job Hunter

Automatically Apply to Engineering Jobs. Just set your preferences and Job Copilot will do the rest — finding, filtering, and applying while you focus on what matters.

Activate JobCopilot