Security Operations Analyst (SIEM Operations and Threat Detection)

Role Overview:

• This position focuses on enhancing threat detection and cybersecurity operations within a globally distributed CSOC team.
• It involves security content management, detection use case lifecycle, and onboarding of new data sources.

Key Responsibilities:

• Develop and maintain security monitoring and analytics capabilities across SIEM, EDR, and cloud platforms.
• Participate in the validation and tuning of detection mechanisms and security content.
• Prepare metrics, dashboards, and reports for service performance.

Qualifications:

• Over 5 years of experience in IT, including alert triage and incident support.
• Proven SIEM administration experience, preferably with Splunk or Microsoft Sentinel.
• Deep knowledge of Microsoft security tools and cloud technologies like Azure, AWS, and GCP.