לוח משרות דרושים SOC/SIEM במרכז

Requirements:
* 1+ year of technical experience within the network, IT, or Cyber security domains.
* Ability to work through shifts at a 24/7 SOC service.
* Strong understanding of network architecture and protocols (e.g. HTTP, DNS).
* Hands-on approach to problem-solving
* Ability to understand and learn complex technological systems and identify critical areas
* Exceptional analytical skills, creative out-of-the-box thinking, analytical mindset with research orientation
* Strong presentations and training skills.
* Experience in operating security tools (e.g. FW, IDS, SIEM, Endpoint protection).
* Working as an analyst in a Cyber SOC - advantage.
* Experience in exposing and exploiting vulnerabilities advantage.

Requirements:
At least 1 year of experience as a SOC analyst
Knowledge in security analysis technologies (e.g., SIEM, FW, AV, IPS or EDR)
Experience in technical-oriented intelligence collection from open sources
Knowledge of cyberattack methodologies and tools

Requirements:
Proven experience as a SOC Manager or similar role.
Extensive knowledge of SIEM technologies and deployment.
Strong understanding of cybersecurity threats and incident response protocols.
Experience in monitoring and securing hybrid environments.
Excellent leadership and team management skills.
Strong problem-solving, analytical skills, and automation approach
Relevant certifications (CISSP, CISM, etc.) are desirable.

Requirements:
Prior experience in SOC at least 1 year
Education: Student/ Bachelors degree in engineering\ computer science\ electrical engineering OR formal Cyber security certificate of 600 hours + \ CCNA
Highly familiar with SIEM (Qradar, Splunk or equivalent)
Willing to work in a 24/7 shifts
Fluent English Speaking and Writing
Advantage: Familiar with cyber intelligence and malware

Requirements:
Prior experience in SOC at least 1 year
Education: Student/ Bachelors degree in engineering\ computer science\ electrical engineering OR formal Cyber security certificate of 600 hours + \ CCNA
Highly familiar with SIEM (Qradar, Splunk or equivalent)
Willing to work in a 24/7 shifts
Fluent English Speaking and Writing
Advantage: Familiar with cyber intelligence and malware

Requirements:
Your Impact

Own and lead individual incident response activities by analyzing security alerts and coordinating responses - Perform in-depth event review and analysis where appropriate - Analyze events, research the potential cause, and recommend a course of action
Hunt for indications of compromise across multiple technology platforms
Continuously improve our alerting use cases and the threat hunting program
Collaborate with SOC Automation team to automate tedious, boring activities
Contribute to proof-of-concept assessments of new security products
Document generate reports detailing security incidents for security leaders and the business
Show off your excellent communication skills in post mortem reviews of incident response activities, to facilitate continuous improvement
Research security trends with the goal of improving our own processes and tools

Requirements:
Understanding the threat landscape, including attack tools, tactics, and techniques, as well as networking and security fundamentals
Experience investigating targeted, sophisticated, or hidden threats in both endpoints and networks
4+ years of relevant experience with a proven track record in cybersecurity research, specializing in either APTs or cybercrime, but with the ability to address the broader threat landscape
Background in forensic analysis and incident response tools (both Dynamic and Static, such as IDA Pro, Ollydbg, and Wireshark) to identify threats and assess the extent and scope of compromises
Understanding of APT operations, including attack vectors, propagation, data exfiltration, lateral movement, persistence mechanisms, and more
Familiarity with organizational cybersecurity measures, including protective tools and remediation techniques
Excellent written and oral communication skills in English
Strong attention to detail
Knowledge of advanced threat hunting methodologies and the ability to develop novel techniques
Experience in an Incident Response environment is a plus
Proficiency in Python and SQL is beneficial
Familiarity with reverse engineering is advantageous
Ability to simplify and clarify complex ideas
Experience in writing technical blog posts and analysis reports
Ability to analyze and understand the infrastructure of malicious campaigns
Self-starter who can work independently and adapt to changing priorities

Requirements:
At least one year of experience in a SOC/MDR or Managed EDR service, including night and weekend shifts.
Strong analytical thinker, problem-solving mindset, and ability to succeed in a dynamic environment.
Independent, bright and positive analyst who strives for excellence.
Proficiency and experience with scripting (Python).
Strong capabilities in drafting cyber security reports for clients.
Basic understanding of the lifecycle of advanced security threats, attack vectors, and methods of exploitation.
Hands-on experience working with SIEM technologies. (e.g. Splunk, QRadar, ArcSight, Exabeam, etc.)
Familiarity with common data and log sources for monitoring, detection and analysis (e.g., Event Logs, firewall, EDR).
Strong technical understanding of network fundamentals, common internet protocols, and system and security controls.
Basic knowledge of host-based forensics and OS artifacts.
Familiarity with cloud infrastructure, web application and servers an advantage.
Fluent English (written, spoken) a must. Another language an advantage.

Requirements:
IT or Security related degree or certification
At least 3 years of experience in similar positions.
Knowledge and experience managing and deploying systems and processes similar to:
Security protocols functionality
Firewalls, URL filtering, email and domain protections
EDR/EPP anti-malware products
SIEM systems management and configurations
Security incidents alerting and monitoring processes
Incident Response processes
Outstanding communication skills that go beyond tech talk the ability to translate complex IT matters to those without an IT background
Strong time management and organizational skills
Previous exposure to MAC, Windows and Linux Operating Systems
Coding languages: Python, Bash, Powershell, minimum knowledge is a must

Requirements:
Over 2 years experience in similar roles.
Understanding of the lifecycle of advanced security threats, attack vectors, and methods of exploitation.
Hands-on experience working with SIEM technologies.
Familiarity with common data and log sources for monitoring, detection and analysis (e.g., Event Logs, firewall, EDR).
Strong technical understanding of network fundamentals, common internet protocols, and system and security controls.
Familiarity with log file formats and understanding of log collection methods including scripting capabilities.
Experience with working with a cloud based environment.
Fluent English (written, spoken) a must.