Job Description
Hi,
Exp: 4+ Years
• Strong understanding of Digital Forensics and Incident Response (DFIR) methodologies.
• Hands-on experience with file system forensics (NTFS, EXT, FAT32) including deleted file recovery, metadata, and artifact analysis.
• Ability to analyse and improve SIEM detection logic and reduce false positives through tuning and validation.
• Ability to perform Threat Hunting aligned with MITRE ATT&CK Standards.
• Proficiency in Linux and Windows environments with scripting capabilities in Python, PowerShell, and Bash for automation and analysis.
• In-depth understanding of security threats (preferably OWASP Top 10 vulnerabilities
• Basic experience with SIEM platforms such as Azure Sentinel, LogRhythm, XSIAM and Wazuh.
• Understanding of security tools like – HIPS/NIPS, Network Monitoring tools, Cloud Security, AV, EDR, WAF.
• Strong Understanding of Cloud Security for cloud such Azure, GCP a...