Job Responsibilities
- Investigate, document, and report on information security issues and emerging trends
- Notify clients of incidents and required mitigation works
- Understand logs from various sources like firewalls, IDS, Windows DC, Cisco appliances, AV and antimalware software, and email security
- Fine-tune SIEM rules to reduce false positives and remove false negatives
- Perform threat intel research and vulnerability analysis
Required Skills and Experience
- Experience: 5-7 years in roles related to information security or similar fields
- Skills: Expertise in Cloudstrike, Proofpoint, LogRhythm, and Rapid 7
- Knowledge of ITIL disciplines like Incident, Problem, and Change Management