Roles & Responsibilities:

• Monitor, investigate, and respond to security alerts across cloud, endpoint, network, and identity platforms.
• Execute remediation and mitigation activities within AWS, Azure, and GCP cloud environments.
• Build, tune, and maintain SIEM, EDR, and cloud-native detections to improve alert accuracy.
• Participate in incident response activities including triage, containment, eradication, and recovery.
• Perform threat hunting using logs, telemetry, and attacker TTPs.
• Support vulnerability management, risk remediation, and security hardening initiatives.
• Develop and maintain security runbooks, playbooks, and operational documentation.
• Implement automation workflows using scripting tools such as Python, PowerShell, Terraform, or CloudFormation.
• Collaborate with infrastructure, cloud, and application teams to reduce attack surface and improve security posture.
...