Cyber Security Operations & Assurance Resource

1. SOC Operations & Incident Response Support day-to-day SOC monitoring, alert analysis, triage, and incident investigation. Analyze security events across SIEM, endpoint, network, cloud, and security platforms. Support incident response, containment, evidence collection, and root-cause analysis. Assist with SOC use-case development, tuning, and false-positive reduction. 2. SIEM Engineering & Threat Detection Support SIEM administration, log-source onboarding, parsing, correlation, and monitoring. Develop and fine-tune detection rules, alerts, dashboards, and security use cases. Identify logging and monitoring gaps across critical systems. Support integration of security platforms with SIEM and SOC workflows. 3. Threat Hunting & Threat Intelligence Perform proactive threat hunting based on IOCs, TTPs, and identified attack patterns. Support threat-intelligence analysis and IOC validation. Map relevant detection and hunting activities to MITRE ATT&CK techniques. Recommend new detection scenarios based on emerging threats. 4. Vulnerability Assessment & Penetration Testing Support vulnerability assessments and penetration testing across infrastructure, applications, APIs, and external-facing assets. Validate identified vulnerabilities and assess technical security impact. Coordinate vulnerability remediation with infrastructure and application teams. Perform remediation validation and security retesting. 5. Security Architecture & Technical Assurance Review infrastructure, network, cloud, and application designs from a cybersecurity perspective. Assess firewall rules, network connectivity, external exposure, and security controls. Participate in technical security reviews for new projects and changes. Provide technical security recommendations based on identified risks. Key Skills & Qualifications Bachelor’s degree in Cybersecurity, IT, Computer Science, or related field. Strong hands-on experience in SOC operations, SIEM, incident response, and threat hunting. Experience with platforms such as Splunk, , Microsoft Defender, CrowdStrike, Trend Micro, or similar technologies. Practical knowledge of VAPT tools and techniques such as Burp Suite, Nessus/Tenable, Nmap, OWASP testing methodologies, or equivalent. Good understanding of MITRE ATT&CK, OWASP Top 10, incident response, network security, and security monitoring. 3-5 years' experience. Show more Show less