Requirements
● Familiar with the concepts of network and information security.
● Ability to develop a new scenario based on an IOC or APT.
● Ability to develop scenarios for SIEM tools.
● Familiarity with event management systems.
● Ability to analyze intrusion detection/intrusion prevention tools.
● Ability to take the necessary steps during the Incident Handling process and compile a Playbook.
● Familiarity with EDR and DLP solutions.
● Ability to parse malware based on tactics, techniques, and processes.
● At least two years of work experience.