- Tel-Aviv, Israel
- 2+ years
Hands‑on SecOps Incident Response Analyst responsible for investigating, containing, and recovering from security incidents across endpoints, identities, cloud, and network environments.
Responsibilities
- Monitor, triage, and investigate security alerts across SIEM, EDR, SOAR, CNAPP and other security platforms
- Handle security incidents end to end: detection, investigation, scoping, containment, eradication, recovery, and lessons learned
- Correlate endpoint, identity, cloud, and network telemetry to establish incident timelines, identify root causes, and assess impact
- Investigate suspicious activity in AWS, Windows, macOS and identity environments
- Write, tune, and maintain detection rules, correlation logic, and investigation queries
Requirements
- Nice to have: Experience in a financial or banking environment
- Nice to have: Advanced Detection Engineering
- Nice to have: Basic malware analysis
- Nice to have: Attack simulations