Incident Responder - Senior(SIEM tools )

Lead the monitoring, detection, and response to complex and large-scale security incidents, ensuring minimal business impact.
Conduct in-depth forensic analysis, threat intelligence correlation, and proactive threat hunting to identify potential vulnerabilities.
Act as a senior escalation point for critical incidents, guiding L1 and L2 responders in incident resolution.
Work closely with executive leadership to develop cybersecurity strategies and risk mitigation plans.
Architect and refine incident response frameworks, playbooks, and automation workflows to improve efficiency.
Implement advanced security analytics and machine learning techniques to detect and mitigate threats proactively.
Lead post-incident reviews, provide detailed reports, and drive security improvements based on incident learnings.
6+ years of experience in incident response, threat hunting, and digital forensics within SOC or enterprise security environments.
7+ years of expertise with IDS/IPS, EDR, network security monitoring, and SIEM platforms like Splunk, IBM QRadar, or ArcSight.
Strong expertise in advanced persistent threats (APTs), zero-day vulnerabilities, and emerging attack methodologies.
Proficiency in scripting languages such as Python, PowerShell, or Bash for security automation and orchestration.
Deep knowledge of regulatory compliance standards (ISO 27001, GDPR, PCI-DSS) and security frameworks such as NIST, MITRE ATTCK, and CIS Controls.
Relevant certifications such as GIAC Certified Incident Handler (GCIH), Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or equivalent are highly preferred.
Strong leadership abilities, mentoring skills, and capability to coordinate incident response efforts across cross-functional teams.
Experience in handling and mitigating large-scale cyber incidents, including ransomware outbreaks and nation-state attacks.
Flexible to work on 24/7 rotational shifts

Skills:

• Identity and Access Mgt (IAM)
• Security Administration
• Unix
• Wintel/Windows Server