Responsibilities :

Key Responsibilities

Investigate security alerts from security tools and business stakeholders.

Perform triage, qualification, and analysis of potential security incidents.

Validate incidents and determine severity, impact, and scope.

Lead investigations involving endpoint, network, cloud, identity, and application telemetry.

Coordinate containment and remediation activities with IT and business teams.

Maintain detection standards, operational procedures, and knowledge management repositories.

Identify areas for improvement and recommend enhancements to security products and monitoring capabilities.

Support continuous improvement of SOC tools, detection use cases, automation workflows, and response processes.

Collaborate with Detection Engineering teams to improve detection coverage and reduce false positives.

Support platform enhancement initiatives by documenting requirements, evaluating solutions, and tracking implementation progress.

Develop operational metrics, dashboards, and reports to measure security operations effectiveness.

Ensure continuous security monitoring and incident response coverage within a global operating model.

Collaborate with Product Owners, Cybersecurity teams, IT teams, and business stakeholders. Required Skills & Competencies - Must Have

Strong knowledge of SOC operations, incident detection, investigation, and response.

Hands-on experience with: o SIEM: Sekoia.io o EDR/XDR: SentinelOne o SOAR: Palo Alto Cortex XSOAR o Email Security: Proofpoint

Experience investigating endpoint, network, cloud, identity, and email security threats.

Strong understanding of threat detection methodologies and incident response processes.

Expertise in security monitoring, log analysis, and cybersecurity operations.

Strong stakeholder management, communication, and collaboration skills.

Analytical thinking, reporting, and problem-solving capabilities.

Good knowledge of networking concepts and security technologies. Required Skills & Competencies - Good to Have

MITRE ATT&CK Framework.

Threat Hunting.

ServiceNow and Jira.

Cloud Security Monitoring.

Scripting and Automation.

Product Ownership and Agile Delivery Practices.

Vulnerability Management.

Detection Engineering concepts and use case development.

Technical and Professional Requirements:

Experience & Qualifications Total Experience: 5-8 years. Relevant Experience: 3-5 years in one or more of the following areas:

SOC Operations

Security Monitoring

Incident Response

Detection Engineering

Security Tool Administration

Cybersecurity Product Management Education: Bachelor's Degree in Cybersecurity, Computer Science, Information Technology, or a related field. Preferred Certifications:

Microsoft SC-200

GCIH

Security+

GCFA

ITIL

CSPO

Other relevant cybersecurity or product management certifications

IT&Data Sr. Product Analyst CERT Asia