Cyber Security Associate

Key Skills:

Roles & Responsibilities:

• Monitor security alerts and events from EDR and SIEM tools.
• Perform initial triage, investigation, and escalation of security incidents.
• Conduct threat hunting across endpoints and cloud workloads using the MITRE ATT&CK framework.
• Assist in building an internal Cyber Threat Intelligence (CTI) repository.
• Analyze malware behaviors and artifacts including hashes, domains, persistence, and lateral movement.
• Perform incident documentation, evidence gathering, and ticket management.
• Build and customize detection rules and logic.
• Conduct weekly calls with clients to discuss detections, incidents, and Managed Detection and Response (MDR) updates.
• Manage multiple client environments while ensuring adherence to Service Level Agreements (SLAs).
• Hands-on experience with SIEM tools such as Microsoft Sentinel (mandatory) and Exabeam (preferred).
• Hands-on experience with EDR tools such as Microsoft Defender for Endpoint (mandatory) and CrowdStrike (mandatory).
• Basic understanding of scripting languages (preferred).
• Strong understanding of threat actors, malware types, and the attack lifecycle.
• Familiarity with the MITRE ATT&CK framework.
• Basic knowledge of PowerShell or KQL (Kusto Query Language) for log analysis.
• Experience in triaging phishing, endpoint, or insider alerts.
• Excellent communication skills and a collaborative team mindset.

Experience Required:

• 1.5-3 years of experience in real-time monitoring and triaging security incidents using EDR and SIEM tools.
• Proven experience in threat hunting and malware analysis.
• Familiarity with industry-standard frameworks such as MITRE ATT&CK.
• Experience working in a Managed Security Services environment across multiple clients.
• Exposure to detection engineering and rule customization for improving threat visibility.

Education: