Cyber Security Engineer (SIEM/SOC)

JOB DESCRIPTION 

We are seeking to expand our Cyber Security capabilities and are looking for an experienced Cyber Defense Center (CDC) Subject Matter Expert (SME) with expertise in SIEM, threat detection engineering, incident response, and data loss prevention. The ideal candidate will have a comprehensive understanding of various cybersecurity domains and will play a critical role in enhancing our cybersecurity posture. This role requires hands-on experience in detecting and responding to security threats, configuring detection tools, and collaborating with cross-functional teams to prevent cyber incidents.

We are looking for the mix of following skills and experience:

SIEM:

• Manage and configure SIEM to collect, analyze, and visualize security data.
• Design and implement SIEM searches, alerts, and dashboards to detect suspicious activities and improve threat visibility.
• Work with IT and security teams to integrate SIEM with other security tools and platforms.

Threat Detection Engineering:

• Develop, tune, and optimize threat detection mechanisms to identify potential threats in real-time.
• Design custom detection rules, signatures, and use cases for various attack techniques and indicators of compromise (IoCs).
• Perform ongoing monitoring and analysis of threat trends, utilizing threat intelligence to enhance detection strategies.

Incident Response:

• Lead incident response efforts by identifying, investigating, and responding to security incidents.
• Perform root cause analysis and implement corrective actions to prevent future occurrences.
• Work closely with IT and business teams to communicate the impact of security incidents and coordinate recovery efforts.

Data Loss Prevention (DLP):

• Implement and manage DLP solutions to monitor and prevent unauthorized access to sensitive data.
• Develop and enforce DLP policies, ensuring compliance with industry standards and regulations.
• Investigate DLP alerts and coordinate with teams to resolve data leakage incidents.

Cybersecurity Expertise Across Domains:

• Provide guidance and expertise across multiple cybersecurity domains such as networksecurity, application security, identity and access management, and cloud security.
• Stay updated on the latest security trends, vulnerabilities, and regulatory requirements.
• Participate in risk assessments, security audits, and compliance activities.

Collaboration and Mentorship:

• Collaborate with other cybersecurity and IT teams to ensure integrated security defensesacross the organization.
• Provide mentorship and training to junior staff members, fostering a culture of continuous learning and improvement within the cybersecurity team.

Threat Hunting:

• Proactively search for and identify cyber threats and malicious activities that evadetraditional detection methods.
• Analyze security data and intelligence to uncover advanced persistent threats (APTs)and unknown threat patterns.
• Develop and execute threat hunting playbooks and techniques using advanced tools and methodologies.
• Collaborate with security analysts and engineers to strengthen detection and prevention strategies based on threat-hunting insights.

REQUIREMENTS