Cybersecurity Operations Engineer II

Responsible for the validation and analysis of investigations within Security Operations Center (SOC) Analyst

Responsible for the monitoring, validation and analysis of investigations of events and alerts on AWS Cloud Infrastructure, SaaS applications and onprem infrastructure

Provide expert analysis of Cloudtrail, CloudWatch, VPC Flow logs for event/incident analysis

Guide and support automate security alerts and use cases in AWS cloud

Carry out triage of incoming issues (initial assessing the priority of the event, initial determination of incident to determine risk and damage or appropriate routing of security or privacy data request)

Proactively identify vulnerabilities across the entire infrastructure environments and suggest updating of SIEM use cases to generate alerts

'On Call' availability for rare 'fire drill' scenarios, for example on high-critical incident response scenarios, or emergent imminent widespread threats requiring urgent action