Job description 

Qualifications

• 2+ years of work experience in security domain, with relevant education background in computer science/engineering
• Good understanding of OS internals (Windows, Linux, Mac)
   
• Good understanding of common security threats and vulnerabilities
• Exposure of TCP/IP networking including knowledge of protocols and / services
• IDS/IPS (Intrusion Detection System/Intrusion Prevention System) monitoring
• Ability to code/ script using any language, Prior experience leveraging common scripting languages (PowerShell, Python) to parse logs, and automate repeatable tasks
• Experience using at least one major SIEM system
• Good understanding of Phishing/Social engineering
• Security process improvement
• Good logical analytical abilities
• Excellent written and oral communication skills.
• Ability to partner with teams s
  uch as developers, vendors, analysts, and project managers.

Responsibilities

• Complete understanding in triage/investigation/remediation of email borne/Phishing threats.
• Prioritize alerts and issues and perform triage to confirm security incidents.
• Performing analysis on true positive alerts to determine root cause and impact.
• Collaborate with teams to create and potentially execute incident mitigation and remediation plans.
• Evaluate security risks and their impact on the Microsoft platform and its online services.
   
• Create technical documentation for other analysts and other teams to follow.
• Support cross-country/Team incidents and crisis.
• Any of the following: CCNA, CSYA+, Network ++ and CEH.
• Experience in managing security incidents that involve Email borne threats.
• Previous experience in creating SIEM use cases, Complex KQL queries and creating playbooks.