Senior cybersecurity Engineer

Key Responsibilities

• Lead real-time security monitoring, detection, and analysis of security events
• Investigate and respond to complex security incidents (malware, phishing, insider threats, lateral movement, APT activity)
• Perform advanced threat hunting and root cause analysis
• Analyze logs from SIEM, EDR, firewalls, IDS/IPS, cloud platforms, and endpoint systems
• Develop and tune detection rules, correlation logic, and alert thresholds
• Create and maintain incident response playbooks and runbooks
• Coordinate with IT, engineering, and leadership during high-severity incidents
• Conduct post-incident reviews and recommend control improvements
• Mentor junior SOC analysts and provide technical guidance
• Support compliance and audit requirements (ISO 27001, NIST, SOC 2, etc.)
• Stay current on emerging threats, vulnerabilities, and attacker techniques

Required Qualifications

• 5+ years of experience in a SOC or cybersecurity operations role
• Strong hands-on experience with SIEM platforms (e.g., Splunk, QRadar, Sentinel)
• Experience with EDR/XDR solutions (CrowdStrike, Defender, Carbon Black, etc.)
• Deep understanding of TCP/IP, DNS, HTTP, VPN, firewalls, and network protocols
• Experience with threat intelligence and MITRE ATT&CK framework
• Proficiency in log analysis and security event correlation
• Knowledge of Windows, Linux, and cloud security (AWS/Azure/GCP)
• Experience handling high-severity incidents independently
• Strong documentation and reporting skills