Analyze and validate alerts from SIEM and other monitoring tools.

Conduct in-depth investigations on security incidents and advanced threats (APT, malware, phishing).

Coordinate containment and remediation activities with internal teams.

Update and improve playbooks and operational procedures.

Write technical reports and provide recommendations for risk mitigation.

At least 2-3 years of experience in SOC or cybersecurity.

Knowledge of SIEM (e.g., Splunk, QRadar), IDS/IPS, firewalls, EDR.

Skills in forensic analysis and incident management.

Good understanding of network protocols (TCP/IP, HTTP, DNS) and operating systems (Windows/Linux).

Cer...