Responsibilities

As a Team Member, ensure that,

• Guaranties confidentiality of information; 

• Ability to work independently and in a team; 

• Follow process and documentation; 

• Good problem solving abilities and analytical skills; 

• High inclination in reading and understanding technical documentation; 

• Good Written and oral skills in English; 

• High degree of commitment and diligence; 

• Willingness to work 24x7 shifts.

Technical Requirements:

• Strong expertise in Endpoint Security tools including monitoring, threat detection, and remediation.

• Strong experience in Incident Response, including investigation, containment, eradication, and recovery activities.

• Investigate and triage DLP alerts to identify potential data exfiltration, policy violations, or insider threats.

• Good working knowledge of SIEM platforms for log monitoring, correlation, alert triage, and threat analysis.

• Good knowledge in log analysis, including investigation of Windows Security, System, Application logs, authentication log, account lockouts, privilege changes, and suspicious process execution events.

• Proficient in Scripting and Automation using PowerShell, Python, and Bash to improve operational efficiency.

• Good knowledge of Vulnerability Management, including scanning, risk prioritization, and remediation tracking.

• Good understanding of Operating Systems: Windows Server, Windows 11, and Linux distributions.

• Hands-on experience working with Linux OS administration and security hardening.

• Experienced in validating and verifying system security requirements, performing security analysis, and designing secure system architectures.

• Conduct root cause analysis (RCA) for security incidents and provide remediation recommendations

• Work with IT, Cloud, Network, and Application teams during incident response.