Experience: 0-2 years | Department: Infosec
Roles and Responsibilities:
- Perform real-time monitoring of security events from multiple log sources.
- Daily tracking of events, alerts, and requests.
- Perform first-level triage of alerts and elevate confirmed incidents to L2 with proper evidence.
- Monitor SIEM components and analyze logs to ensure relevant security information is
- Use the SIEM tool to document security incidents and responses daily.
- Detect suspicious logs and create reports and charts for easy understanding.
- Perform first-level phishing email analysis (headers, URLs, attachments).
- Investigate basic alerts triggered by endpoints, email gateway, and antivirus.
- Handle queries and requests through calls and emails.
- Track vulnerability and patch status and follow up on closure.
- Assist in conducting security awareness training.
- Follow SOPs, playbooks, and shift handover procedures.
- Work as part of a team to ensure corporate data and technology platform components are
gathered.
safeguarded from known threats.
Preferred Qualifications:
- 0-2 years of experience with a Bachelor's degree in Computer Science, or a related technical
- Should have exposure to SIEM tools like QRadar, LogRhythm, sentinelone, Log360 and
- Should have worked on SIEM tools like QRadar, LogRhythm, sentinelone and endpoint security
- Should have basic knowledge of any DLP solution from any vendor.
- Good written and verbal communication, and willingness to work in shifts.
- Certifications such as CompTIA Security+ or CEH are an added advantage.
domain from reputed organizations.
endpoint security like EDR, XDR (CrowdStrike, SentinelOne, Microsoft Defender for Endpoint).
like EDR, XDR (CrowdStrike, SentinelOne).