2029 Security Operations Analyst

Requisitos

• Experience Level: 5+ years of relevant experience in cybersecurity and Security Operations (SOC) environments
• Incident Response & SIEM: Deep expertise in SIEM investigation, end-to-end incident response, and triage of complex security events
• Endpoint Fundamentals: Strong proficiency in Endpoint Detection and Response (EDR) platforms and endpoint security fundamentals
• Autonomy & Analytical Rigor: Excellent troubleshooting skills with the ability to work independently and make sound containment decisions..
• Operational Drive: Proactive mindset focused on identifying operational bottlenecks and driving continuous SecOps improvements

Desejáveis

• Tooling & Platforms: Direct experience with Splunk / Splunk ES / Splunk SOAR, SentinelOne, CrowdStrike, Microsoft Defender, or Google SecOps
• Detection & Frameworks: Experience in detection engineering, rule tuning, threat hunting, and applying the MITRE ATT&CK framework
• Automation & Scripting: Proficiency in Python or general scripting alongside hands-on SOAR integration experience
• Cloud & Vulnerability Management: Exposure to AWS/Cloud security environments and vulnerability management tools like Tenable