Hands-on experience with Cortex XSIAM, IBM QRadar, Microsoft Sentinel, and other SIEM platforms for security monitoring, correlation, threat detection, and incident investigation.Experience with CrowdStrike Falcon EDR, Microsoft Defender for Endpoint (MDE), Bitsight, and threat intelligence platforms.Monitor, analyze, and investigate security events and alerts in real time from multiple security tools and log sources.Perform incident triage, analysis, containment recommendations, and first-level escalation management.Conduct proactive threat hunting, IOC enrichment, threat intelligence analysis, and event correlation activities.Manage day-to-day SIEM operations, including log source health monitoring, alert tuning, and use case optimization.Support development and enhancement of security detections, correlation rules, and incident response processes.Maintain and update SOC SOPs, runbooks, knowledge articles, and operational procedures.Independently investigate and resolve security incidents while ensuring adherence to defined SLAs.Possess strong knowledge of TCP/IP, OSI Model, network protocols, cybersecurity threats, attack techniques, and MITRE ATT&CK framework.Collaborate with internal teams on vulnerability management, security posture improvement, and remediation activities.Prepare and present weekly and monthly SOC operational reports, security metrics, dashboards, and threat trend analysis.
Bachelor's Degree in Computer Science, Information Systems.Information Security certifications (CEH, CHFI and Comp TIA Security +)2-3 years of work experience SOC Operation and Engineering in a Medium/Large Global Organization.Excellent verbal, written, and analytical skillsAbility to work well in team environmentAbility to adopt new technologies and tools.