5-10 years of relevant experience in the Information Security domain. In-depth knowledge of security monitoring and incident response. Knowledge of conducting security investigations. Solid understanding of network protocols and architecture. Good understanding of vulnerability management from technical and process standpoint. Experience in performing digital forensics and incident response using tools such as Windows ATP, CrowdStrike, Encase, FTK, Bro, Sourcefire, etc. Experience with Vulnerability Management tools such as Nexpose, Qualys, Nessus, etc. Experience in handling vulnerability assessment for Windows and linux environment is a must. Ability to automate solutions to repetitive problems/tasks using scripting languages such as Perl, Python, PowerShell or Bash. Great interpersonal skills and love for a team environment. Advced English skills both written and spoken (Above 80%). Bachelor's Degree in a related field. Learn key workflow systems including ServiceNow Security Operations Incident Response module, Splunk Enterprise, and other incident collection locations such as security shared mailboxes. Read and understand the incident response plan and associated security policies. Handle escalated incidents and contribute during major investigations. Own security incidents scoped for SOC team including phishing response, malicious code detection, digital risk protection, or fraudulent activity. Act as a shift lead and take ownership of daily security handover sessions to ensure the next shift is updated, understands urgency and document progress towards resolving an incident. Investigate declared/escalated incidents and assist junior team members.