Specialist - Cyber Defense Centre

Job Summary

Required Software Skills

• SIEM Platforms: Splunk, IBM QRadar, or Azure Sentinel (expertise in configuration and operational management)
• Endpoint Detection and Response (EDR/NDR): Experience with platforms such as CrowdStrike, Microsoft Defender, or Palo Alto Cortex XDR
• Security Orchestration, Automation, and Response (SOAR): Familiarity with Palo Alto Cortex XSOAR,Splunk SOAR, or similar tools
• Threat Intelligence Platforms and feeds
• Log analysis and network forensic tools

Preferred Software Skills

• Cloud Security Tools for AWS, Azure, GCP
• Threat hunting frameworks and scripting (Python, PowerShell)
• Digital investigation tools

Overall Responsibilities

• Conduct proactive threat hunting activities to identify hidden or emerging cyber threats using advanced analytics and intelligence sources.
• Support and lead incident response efforts by investigating security incidents, coordinating containment, eradication, and recovery actions.
• Monitor, tune, and enhance security tools such as SIEM, EDR, NDR, and SOAR to increase detection efficacy.
• Analyze security data to identify trends, generate detailed reports, and develop dashboards for leadership insights.
• Collaborate with cross-functional teams to improve detection rules, develop incident response playbooks, and conduct cyber drills.
• Validate security controls regularly to ensure readiness and effectiveness.
• Maintain comprehensive documentation of investigations, findings, and lessons learned for continuous improvement.

Technical Skills (By Category)

• Programming Languages:
• + Required: Scripting skills in Python or PowerShell
• + Preferred: Knowledge of additional languages such as Bash or Perl
• Databases/Data Management:
• + Experience with log management and analysis of large datasets
• Cloud Technologies:
• + Experience with cloud environment security (AWS, Azure, GCP) is an advantage
• Frameworks and Libraries:
• + Familiarity with MITRE ATT&CK framework and TTPs
• Development Tools and Methodologies:
• + Familiar with security automation, incident response frameworks, and Agile methodologies

• Security Protocols & Standards

Experience Requirements

• Minimum of 3-5 years of experience in cybersecurity roles, specifically in threat detection, incident response, or security operations.
• Proven experience supporting or leading cyber defense operations in enterprise environments.
• Familiarity with security frameworks, threat intelligence, and forensics.
• Industry experience in financial services, technology, or related sectors preferred.
• Candidates with relevant certifications or alternative security training programs are encouraged to apply.

Day-to-Day Activities

• Performing continuous monitoring and analysis of security alerts and logs.
• Conducting threat hunting exercises and updating detection content.
• Leading or supporting incident investigations, coordinating with stakeholders.
• Tuning security tools and developing automated detection workflows.
• Participating in team meetings, tabletop exercises, and security drills.
• Producing reports, dashboards, and incident summaries for stakeholders.
• Engaging in knowledge sharing and continuous learning initiatives.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or an equivalent qualification.
• Certifications such as CISSP, GSEC, GIAC, CEH, or relevant vendor-specific accreditations are highly preferred.
• Ongoing professional development in cybersecurity tools, threat intelligence, and incident response.

Professional Competencies

• Strong analytical and investigative skills to analyze complex security threats.
• Excellent communication skills for technical reporting and stakeholder engagement.
• Proven ability to work collaboratively in a team environment and across departments.
• High attention to detail and a methodical approach to investigations.
• Adaptability to evolving threats and technology landscapes.
• Critical thinking and problem-solving capabilities to develop effective mitigation strategies.
• Ethical judgment in handling sensitive information with integrity.
• ***S***

***Ynechron’S Diversity & Inclusion Statement***