Back
Login to See Your Match Score
Create a free account or log in to unlock your CV match score across:
Strong employer brand and metro hiring create moderate candidate competition.
Specialized cybersecurity incident response skills are moderately transferable across industries.
Explicit 8+ years, SOC/IR experience and certifications make candidate filtering stringent.
Lead and coordinate incident response activities for medium to high severity cybersecurity incidents across on-premises, cloud, and affiliated environments.
Monitor, analyze, and investigate security alerts from SIEM, EDR/XDR, Email Security, Cloud Security, and other platforms to mitigate cyber risks.
Document and communicate investigation findings, risks, and remediation efforts to leadership and stakeholders, including participation in threat hunting and continuous improvement initiatives.
Minimum 8 years of overall IT/Cybersecurity experience with at least 5-6 years in Security Operations, Incident Response, or Threat Detection roles.
Experience serving as Incident Commander or lead investigator during cybersecurity incidents is required.
Hands-on experience with EDR/XDR solutions (e.g., Microsoft Defender for Endpoint, CrowdStrike Falcon) and cloud platforms (Azure, AWS, Microsoft 365) for log and event analysis.
Not explicitly mentioned in the JD: mandatory educational qualifications or strict location requirements.
Proven ability to lead and coordinate incident response for complex and high severity cybersecurity incidents.
Strong technical expertise covering SIEM, EDR/XDR, network technologies (TCP/IP, DNS, Firewalls, IDS/IPS), and cloud security environments.
Experience leveraging AI-assisted security operations and understanding of AI/Generative AI security risks to enhance SOC operational efficiency.