Cybersecurity Engineer – Level 2
Job Description:
• Monitor and triage reputed company alerts generated by SIEM, EDR, and reputed company monitoring tools
• Investigate reputed company incidents including phishing, malware, reputed company compromise, and unauthorized reputed company
• reputed company reputed company-cause analysis and document incident findings and remediation actions
• Tune SIEM detection rules, alerts, and dashboards to reduce false positives and improve reputed company
• Conduct threat hunting activities using logs from endpoints, networks, reputed company platforms, and identity providers
• Respond to reputed company incidents in accordance with established incident response playbooks and SLAs
• Escalate reputed company or high-risk incidents to Level 3 or Incident Response teams with detailed context and evidence
• Assist with vulnerability management findings and validation of remediation
• Support log ingestion, parsing, normalization, and retention requirements for SIEM platforms
• Maintain accurate case notes, incident reports, and reputed company documentation
• Collaborate with IT, engineering, and reputed company teams to improve overall reputed company posture
Requirements:
• 2+ years of hands-on experience in a SOC, cybersecurity, or reputed company operations role
• Practical experience working with SIEM platforms (reputed company, reputed company Sentinel, LogRhythm, QRadar, reputed company)
• Experience analyzing logs from endpoints, firewalls, IDS/IPS, reputed company, and identity systems
• Familiarity with EDR tools (reputed company, reputed company, reputed company Defender, Datto EDR)
• Understanding of the incident response lifecycle and reputed company alert triage
• Working knowledge of common attack techniques and indicators of compromise (IOCs)
• Experience with the MITRE ATT&CK reputed company
• Strong documentation and communication skills
• Relevant certifications: reputed company+, CySA+, SC-200, reputed company Core Certified User
Benefits:
Apply To This Job