About this role

Actively monitor security dashboards and alerts using Splunk to detect suspicious activities and potential incidents.
Perform in-depth analyses of security events, leveraging Splunk to aggregate and correlate data from various telemetry sources to identify IOCs.
Assist in coordinated incident response efforts during high-stakes investigations.
Maintain clear, detailed incident reports and contribute to the creation and refinement of technical playbooks and standard operating procedures.
Stay abreast of industry trends, emerging threat techniques, and best practices in incident response and cybersecurity.
Ensure effective incident analysis within cloud-agnostic environments involving Azure, AWS, and GCP.

3–5 years of experience in security operations or incident response
Strong command of Splunk for log analysis, data correlation, and building dashboards across multiple sources.
Solid understanding of incident response processes and familiarity with telemetry, SIEM/SOAR integration, and cloud environments.
Exposure to security practices across various cloud platforms including Azure, AWS, and GCP.

Senior Security Incident Response Engineer

Key skills