- Monitor security alerts, events, and incidents across enterprise IT environments.
- Analyze security logs and investigate suspicious activities, potential threats, and vulnerabilities.
- Perform security incident detection, analysis, response, and documentation.
- Work with SIEM tools to identify and investigate security threats.
- Conduct vulnerability assessments and support remediation activities.
- Monitor network traffic and identify unusual or malicious activities.
- Support endpoint security, firewall, antivirus, and intrusion detection systems.
- Assist in threat intelligence analysis and security risk assessments.
- Perform security audits and ensure compliance with organizational security policies.
- Collaborate with IT infrastructure and network teams to strengthen security controls.
- Prepare security incident reports and maintain investigation documentation.
- Support security awareness initiatives and recommend improvements to security practices.
- Assist in implementing security frameworks and compliance requirements.
Required Technical Skills
Security Monitoring & SIEM
- Microsoft Sentinel.
- IBM QRadar.
- Security log analysis and event correlation.
- Security alert monitoring and investigation.