Job Description
Roles & Responsibilities:
- Monitor, investigate, and respond to security alerts across cloud, endpoint, network, and identity platforms.
- Execute remediation and mitigation activities within AWS, Azure, and GCP cloud environments.
- Build, tune, and maintain SIEM, EDR, and cloud-native detections to improve alert accuracy.
- Participate in incident response activities including triage, containment, eradication, and recovery.
- Perform threat hunting using logs, telemetry, and attacker TTPs.
- Support vulnerability management, risk remediation, and security hardening initiatives.
- Develop and maintain security runbooks, playbooks, and operational documentation.
- Implement automation workflows using scripting tools such as Python, PowerShell, Terraform, or CloudFormation.
- Collaborate with infrastructure, cloud, and application teams to reduce attack surface and improve security posture.
- Monitor cl...