Sr. Engineer - IS Security

Education: Bachelor's /masters degree, preferably in Computer Science or an equivalent subject.

Experience: 5+ years of hands-on experience in SOC operations.

Preferred Qualifications:

• Strong experience with SIEM tools (e.g., Splunk, QRadar, Sentinel, etc.) and security solutions such as:
• EDR: CrowdStrike, Defender for Endpoint, or equivalent
• Email Security: Proofpoint, Mimecast, or equivalent
• Web Proxy / DLP / IDS-IPS systems
• Deep understanding of incident response processes and best practices.
• Familiarity with log collection and analysis, network security monitoring, and threat intelligence.
• Sound knowledge of network protocols (TCP/IP), Windows OS internals, and enterprise systems such as Active Directory, DNS, LDAP, VPN, and DHCP.
• Strong analytical, problem-solving, and communication skills.
• Good understanding of security threats, vulnerabilities, and malware behavior.
• Knowledge or experience in honeypot deployment and threat hunting methodologies is an added advantage.

How will you thrive and create an impact:

• Handle and respond to security incidents, ensuring timely triage, analysis, containment, eradication, and recovery.
• Support the development and maintenance of Avantors business continuity and incident response processes and assist to develop playbook and runbook to support process.
• Analyzing alerts from SIEM, EDR, DLP, email security, and proxy systems, identifying false positives and real threats and experience in OT environments are preferable.
• Perform threat hunting activities to proactively identify potential compromises or malicious activities.
• Assist in Zero-day vulnerability process by validating scan results, tracking remediation, and assessing risk exposure and contribute to Emerging Threats, honeypot monitoring, and threat intelligence correlation.
• Support forensic investigations and root cause analysis for critical security incidents.
• Maintain documentation of incidents, findings, and corrective actions as part of the SOCs continuous improvement process.
• Ensure all operations comply with Avantors Information Security policies and regulatory requirements.
• Work collaboratively with IT, GRC, and business units to improve overall security posture.