Description:
Cyber Security Specialist to support the maintenance, evolution, and strengthening of information security processes and controls, supporting SOC operations, incident response, continuous improvements, and strategic cybersecurity projects.
This position will play a fundamental role in analyzing critical scenarios, evolving monitoring, implementing best practices, and providing technical support to operational teams and clients.
Requirements:
- Act in critical security incidents;
- Technical support to SOC N1/N2/N3;
- Analyze and evolve correlation rules in SIEM;
- Perform tuning and continuous improvement of alerts;
- Develop and review operational playbooks;
- Support threat hunting activities;
- Conduct root cause analyses;
- Validate security tool integrations;
- Support security and operational improvement projects;
- Create dashboards, metrics, and executive reports;
- Act in vulnerability and risk mitigation;
- Support incident response processes;
- Interact with infrastructure, cloud, network, and application teams;
- Ensure compliance with security policies and processes;
- Support automation and SOAR initiatives;
- Propose operational and strategic improvements for the environment.
Technical Requirements
- Experience with SOC operations;
- Knowledge in SIEM (Microsoft Sentinel, QRadar, Splunk, ArcSight, or similar);
- Knowledge in EDR/XDR;
- Knowledge in log analysis and event correlation;
- Knowledge in incident response;
- Knowledge in networks, protocols, and infrastructure security;
- Knowledge in MITRE ATT&CK;
- Knowledge in vulnerability analysis;
- Knowledge in Windows and Linux environments;
- Experience with security tools;
- Knowledge in cloud security will be a differentiator;
- Knowledge in automation/SOAR will be a differentiator.
Differentials
- Security certifications;
- Experience in large corporate environments;
- Experience with Microsoft Sentinel;
- Experience with CTI;
- Knowledge in automation and scripts;
- Experience with security frameworks.
Education
Complete higher education or currently pursuing: Information Security; Networks; Information Systems; Computer Science or related areas.
Take your interview
Access: https://entrevista.starmindai.ai
Enter the code: NAVA-CIBERN1SOC