You monitor, investigate and respond to security events across the systems we manage, and help improve how we detect threats.
Key Responsibilities
- Monitor security alerts and logs in the SIEM and related tools
- Triage and investigate suspicious activity and escalate incidents
- Follow and improve incident response playbooks
- Tune detection rules to cut noise and catch real threats
- Write clear incident reports and recommendations
Required Skills
- Understanding of networking, operating systems and common attack techniques
- Interest in or experience with SIEM, EDR or log analysis tools
- A calm, methodical approach to investigating incidents
- Good written communication
Nice to Have
- Security certification such as Security+ or equivalent
- Familiarity with the MITRE ATT&CK framework
Tools and technologies: SIEM and log analysis; EDR tooling; MITRE ATT&CK (nice to have); Incident response playbooks
How to prepare
- Be ready to walk through how you would triage a suspicious login alert
- Revise common attack techniques and log sources