Security Operations Centre Specialist
- Джерело:
- djinni.co
Що робити
- Manage and support daily SOC operations, including security incident analysis, triage, investigation, and response;
- Monitor security alerts, conduct proactive Threat Hunting, and determine appropriate incident response, mitigation, and recovery actions;
- Detect, analyze, and mitigate DoS/DDoS attacks across network, transport, and application layers (L3/L4/L7);
- Configure, maintain, and optimize SIEM, EDR, DLP, and DDoS protection solutions, including detection rules, alerting policies, and rate-limiting configurations;
- Continuously improve detection accuracy by reducing False Positives and optimizing security monitoring processes;
Що очікуємо
- Proven hands-on experience in SOC operations, security incident detection, analysis, and response;
- Strong experience identifying and mitigating various DoS/DDoS attack vectors, including SYN floods, UDP amplification, HTTP/HTTP2 floods, DNS reflection, and slow-and-low attacks;
- Practical experience with DDoS mitigation solutions such as Cloudflare, Akamai Prolexic, AWS Shield, Radware, Imperva, Arbor Networks, or similar WAF/Anti-DDoS technologies;
- Hands-on experience with SIEM platforms, including detection rule creation, configuration, tuning, and optimization;
- Practical experience working with EDR and DLP solutions, including security alert monitoring, investigation, and incident response;
Схожі вакансії
З блогу Trackr
Усі статті →
Знайдено через trackr.help/jobs · Канал: @trackrhelp · Бот для персональних сповіщень: @trackrhelpBot