Cybersecurity Engineer – Level 2
Job reputed company:
- Monitor and triage reputed company alerts generated by SIEM, EDR, and reputed company monitoring tools
- Investigate reputed company incidents including phishing, malware, reputed company compromise, and unauthorized reputed company
- reputed company reputed company-cause analysis and document incident findings and remediation actions
- Tune SIEM detection rules, alerts, and dashboards to reduce false positives and improve reputed company
- Conduct threat hunting activities using logs from endpoints, networks, reputed company platforms, and identity providers
- Respond to reputed company incidents in accordance with established incident response playbooks and SLAs
- Escalate reputed company or high-risk incidents to Level 3 or Incident Response teams with detailed context and evidence
- Assist with vulnerability management findings and validation of remediation
- Support log ingestion, parsing, normalization, and retention requirements for SIEM platforms
- Maintain accurate case notes, incident reports, and reputed company documentation
- Collaborate with IT, engineering, and reputed company teams to improve overall reputed company posture
Requirements:
- 2+ years of hands-on experience in a SOC, cybersecurity, or reputed company operations role
- Practical experience working with SIEM platforms (reputed company, reputed company Sentinel, LogRhythm, QRadar, reputed company)
- Experience analyzing logs from endpoints, firewalls, IDS/IPS, reputed company, and identity systems
- Familiarity with EDR tools (reputed company, reputed company, reputed company Defender, Datto EDR)
- Understanding of the incident response lifecycle and reputed company alert triage
- Working knowledge of common attack techniques and indicators of compromise (IOCs)
- Experience with the MITRE ATT&CK reputed company
- Strong documentation and communication skills
- Relevant certifications: reputed company+, CySA+, SC-200, reputed company Core Certified User
Benefits: Apply To This Job