·        SIEM Management & Threat Hunting:

o   Administer and optimize Splunk as the primary SIEM tool for threat detection and response.

o   Develop and fine-tune detection rules, alerts, and dashboards to identify malicious activity and anomalies.

o   Conduct proactive threat hunting to identify advanced threats and vulnerabilities within the environment.

·        Blue Teaming & Incident Response:

o   Act as a key member of the blue team, defending against cyberattacks and responding to security incidents in real-time.

o   Perform in-depth analysis of security events, including malware, phishing, and unauthorized access attempts.

o   Collaborate with the incident response team to contain, eradicate, and recover from security incidents.

·        Technical Monitoring & Attack Analysis:

o   Monitor network traffic, endpoints, and cloud environments for signs of compromise or suspicious activity.

o   Analyze attack patterns, tactics, techniques, and procedures (TTPs) to improve detection capabilities.

o   Provide actionable insights to improve the organization’s defensive posture.

• Security Compliance & Auditing:

• Ensure SOC operations align with industry standards and regulatory requirements (e.g., ISO 27001, NIST, GDPR, PCI-DSS, HIPAA).
• Conduct periodic security audits and assessments to identify gaps and recommend improvements.

o   Maintain documentation for compliance reporting and audit readiness

·        Continuous Improvement & Collaboration:

o   Stay updated on the latest cybersecurity threats, vulnerabilities, and industry best practices.

o   Collaborate with cross-functional teams to improve security processes, tools, and technologies.

o   Provide training and mentorship to junior team members on SIEM tools and threat-hunting techniques.

Requirements: 

•     Bachelor’s degree in Cybersecurity, Information Technology, Computer Science or Relevant certifications.
•     Expertise in Splunk for log analysis, correlation, and visualization.    
•     Knowledge of scripting languages (e.g., Python, PowerShell) for automation and data analysis.   
•     Familiarity with risk management frameworks and compliance standards (e.g., ISMS, NIST, GDPR, PCI-DSS)
•     Hands-on experience with security tools such as firewalls, IDS/IPS, EDR, and vulnerability scanner
• Bonus if you have a strong understanding of ISO 27001 controls and experience in conducting technical audits