Engineer - Information Security Operations

Role overview

Responsibilities

• Monitor security alerts and logs; investigate and remediate incidents and analyze data for patterns or anomalies.
• Maintain and configure SIEM, NDR, email security, and EDR tools; implement new security tools and technologies.
• Track threats and vulnerabilities and apply threat intelligence to improve detection and response capabilities.
• Document incidents, investigations, and remediation; prepare stakeholder reports, including monthly security reports.
• Collaborate with security and IT teams and provide guidance to junior L1 analysts as needed.

Qualifications

• Two years of security analyst experience focused on incident response and security monitoring.
• Proficiency with security tools, including SIEM platforms and EDR systems.
• Excellent incident-response and analysis knowledge; strong understanding of network protocols, operating systems, and security threats.
• Strong analytical, problem-solving, communication, and teamwork abilities.
• Relevant bachelor's degree in information security, computer science, or a related field.
• SANS-type professional certifications, regional experience, and MSSP or MSP experience are desirable.