Role
- Monitor security events and investigate cyber incidents across enterprise environments.
- Perform Incident Response & Threat Hunting, from detection to containment and remediation.
- Conduct Vulnerability Assessment & Penetration Testing (VAPT) across applications, APIs, servers, networks, and Active Directory.
- Strengthen security controls and hardening across endpoints, infrastructure, and cloud environments.
- Develop security automation and provide actionable recommendations to continuously improve our security posture.
- Collaborate with IT and business teams to mitigate cybersecurity risks.
Qualifications
- Bachelor's Degree in IT, Computer Science, Cybersecurity, or related fields.
- 3–5 years of hands-on cybersecurity experience, particularly in SOC, Incident Response, VAPT, or Security Engineering.
- Strong understanding of SIEM, EDR/XDR, IDS/IPS, OWASP Top 10, MITRE ATT&CK, CVE/CVSS, IAM, and Zero Trust.
- Solid knowledge of networking, Windows/Linux Server, Active Directory, virtualization, containers, and cloud platforms.
- Familiar with tools such as Splunk/Google SecOps/Wazuh, Burp Suite, Nessus/OpenVAS, Nmap, and Wireshark.
- Scripting capability in Python, Bash, or PowerShell.
- Strong analytical, problem-solving, and communication skills.
A Plus: Cybersecurity certifications (CEH, OSCP/eJPT, Security+, CyberOps, GIAC, SC-200) and active participation in Bug Bounty, CTF, or cybersecurity communities.
