Responsibilities:
-
Monitor and analyze security alerts generated by Securonix SIEM.
-
Perform initial triage of security incidents based on risk scores and behavioral analytics.
-
Escalate security incidents to L2 for deeper investigation.
-
Assist in fine-tuning Securonix correlation rules to reduce false positives.
-
Document incidents, investigation steps, and outcomes in the incident management system.
-
Support phishing investigations and basic threat analysis.
-
Follow standard operating procedures (SOPs) for incident response.
Requirements:
-
Bachelor’s degree in Cybersecurity, IT, or related field.
-
Basic knowledge of SIEM and User Entity Behavior Analytics (UEBA).
-
Understanding of security frameworks (NIST, SOC 2, MITRE ATT&CK).
-
Strong analytical skills and attention to detail.
Certifications like Securonix Security Analyst, Security+, or Microsoft SC-900 (preferred).