About this role
- To Monitor, analyze & interpret security/system/application/infrastructure logs for events, configuration irregularities & potential incidents - To leverage security tools, custom built dashboards and/or proactive identification approaches to detect anomalous activities - Monitoring Cloud infrastructure for security-related events - Monitoring threat/vulnerability landscape and security advisories, coordinate and escalate as appropriate - Collaborate with Product Security, Infrastructure Security, and GRC teams on cross-functional investigations and audit-related tasks as needed.
- Work with application security teams, product specialists, GRC, and legal teams on active incidents and/or investigations
- To participate in a major incident call, document incident report summaries
- To document, follow and execute standard operating procedures (SOPs)
- Documenting/Managing/maintaining & following use cases, playbooks and/or knowledge base articles
- To work on incidents, requests related to security
- Develop and maintain security detection use cases and alerts within SIEM platforms
- Design and implement automation workflows using SOAR or similar security orchestration tools
- Working knowledge of AI/LLM tools (e.g., Gemini, ChatGPT, Claude) and their application in security operations.
Understanding of authentication mechanisms, including private/public key concepts, familiarity with command-line interfaces (CLI), IDE-based tools, and agent-based workflows. Awareness of API usage, token management, and secure handling of credentials - Owning responsibilities within a shift with a positive mindset towards growth & upskilling - Engaging & escalating issues as necessary