Job Description
Manage security event monitoring and incident response using SIEM platforms, with preference for Azure Sentinel and ArcSight.
Analyze and respond to security events from diverse sources such as firewalls, IDS/IPS, antivirus solutions, DAM systems, web servers, proxies, and banking applications.
Develop and maintain alert rules and logic within SIEM to ensure accurate detection of security events.
- Assist senior personnel in managing complex security incidents and improving incident response times.