Key Responsibilities:

Monitor and analyze security alerts, logs, and events using SIEM platforms (Splunk, QRadar, Sentinel, etc.).
Investigate security incidents, perform triage, and support end-to-end incident response activities.
Conduct vulnerability scans, risk assessments, and coordinate remediation efforts with technical teams.
Research emerging cyber threats, attack vectors, malware trends, and security advisories.
Maintain and configure security tools including EDR, firewalls, IDS/IPS, antivirus, and threat intelligence systems.
Assist with security awareness initiatives, user training, and phishing simulation campaigns.
Perform access reviews and monitor identity and privileged access activities.
Document incident findings, security reports, root-cause analysis, and best practices.
Assist in developing and improving SOC playbooks, runbooks, and security standard operating procedures.
Work closely with IT, networking, and cloud teams to ensure secure configurations and guardrails.

Required Skills & Qualifications:

Bachelor’s degree in Cybersecurity, Computer Science, Information Security, or related discipline.
Experience working with SIEM tools (Splunk, QRadar, Sentinel, Elastic, etc.).
Knowledge of security operations, incident response, threat hunting, and digital forensics fundamentals.
Familiarity with vulnerability scanners such as Qualys, Nessus, Rapid7, or OpenVAS.
Understanding of networking, TCP/IP, firewalls, VPNs, DNS, proxies, and security protocols.
Hands-on experience with EDR tools (CrowdStrike, Carbon Black, Microsoft Defender ATP, SentinelOne).
Strong understanding of cyber frameworks (MITRE ATT&CK, NIST, ISO 27001, CIS Controls).
Basic scripting skills in Python, Bash, or PowerShell for automation and log analysis (preferred).
Excellent analytical, documentation, and communication skills with attention to detail.

Job Type: Full-time

Pay: $70,000.00-$120,000.00 per year

Work Location: In person

Tek Tron IT

New Jobs