About this role
Description
Provide 24/7 visibility, proactive threat detection, rapid investigation, and continuous threat hunting. The SOC is the front line of defense and the backbone of security operations.
Responsibilities
• Conduct full incident investigations on medium- and high-severity events
• Correlate telemetry from multiple sources (EDR, network, IAM, logs)
• Coordinate with response teams for containment and remediation
• Perform root-cause and impact analysis
Requirements
• Deep understanding of attacker lifecycle and kill chain
• Memory forensics and host artifact analysis
• Packet capture and traffic analysis
• Scripting for enrichment and automation
Tools & Platforms
• EDR / SOAR platforms
• Volatility / FTK – memory analysis
• Wireshark – network inspection
• Threat Intel platforms – enrichment & pivoting