Key Responsibilities 

• Proficient in the use of one or more SIEM tools (e.g., Elastic, LogRhythm, Splunk, QRadar, Rapid 7, Exabeam, Sentinel ) for effective security monitoring.
• Proficient in the use of one or more XDR tools (e.g., CrowdStrike, Cisco, Palo Alto, Trend Micro) for efficient defense analysis.
• Understand log formats (syslog, HTTP logs, DB logs) and are capable of forensic gathering to trace security events.
• Knowledgeable in reverse-engineering and analysis tools (Wireshark, IDA Pro, ImHex, Radare2) for detailed security investigations.
• Familiar with security devices including IDS/IPS, HIDS/HIPS, WAFs, Phishing detection systems, Firewalls, and Antivirus systems, and understand their log outputs.
• High-level understanding of the TCP/IP protocols and the OSI Seven-Layer Model.
• (optional)Capable of creating custom content in SIEM, including dashboards and reports, according to customer requirements.
• Respond to, report on, and escalate incidents when SLAs are not met; track security events reported to the SIEM, system, and event logs, and other sources for further analysis.
• Monitor internal and external threats by examining logs, mailbox monitoring, events, and alerts generated by multiple platforms for signs of anomalous activity, evidence of security incidents, or other conditions that may compromise the security, integrity, or confidentiality of our systems and data.

Requirements: