About the role
Experience range: 4 – 9 years
- Work in 24x7 SOC environment
- Perform detailed investigation of security alerts and events
- Handle Incident Response from Cyber Security perspective
- Work to build and fine tune Splunk / SIEM use cases
- Perform log correlation across multiple sources
- Conduct proactive threat hunting using indicators of compromise (IOCs) and behavioral patterns
- Leverage frameworks like MITRE ATT&CK for threat mapping
- Provide incident reports, dashboards, and trend analysis
- Follow and enhance SOC runbooks and SOPs
- Perform advanced triage of Splunk alerts and validate true positives vs false positives
- Contribute to SOAR playbook execution and automation initiatives
- Build and optimize SPL queries for investigation and threat detection