Required Skills: Security+, CySA+, GCIH, GCIA, CISSP, SSCP , SOAR platforms, security orchestration workflows , Security automation exposure, workflow automation, process improvement initiatives , Scripting, development. automation efforts , Microsoft Sentinel , Google SecOps , Cortex XDR , Okta

Job Description

• Investigate and triage cybersecurity alerts across multiple security domains.
• Determine whether alerts represent true positives or false positives and document findings.
• Manage, review, and close security tickets in collaboration with the security operations team.
• Escalate suspicious activity and confirmed incidents for deeper analysis and response.
• Monitor and analyze security telemetry, logs, and alerts related to identity, endpoint, email, and cloud environments.

• 5+ years of cybersecurity operations, SOC, incident response, or security engineering experience
• Experience investigating security alerts and performing incident triage
• Experience determining true positives versus false positives and escalating incidents appropriately
• Experience working within a Security Operations Center or similar security monitoring environment
• Experience with SIEM platforms
• Experience with EDR/XDR platforms
• Experience with identity, endpoint, email security, and access-related investigations
• Experience managing security tickets through Jira, ServiceNow, or similar ticketing platforms