Security Operations

• Act as the technical focal point for managing medium- to high-complexity security incidents and crises, from triage and forensic analysis through containment and remediation (post-mortems).
• (MDR/Blue Team): Develop, implement, and optimize detection rules (use cases), dashboards, and security alerts on platforms such as SIEM and SOAR.
• Lead proactive Threat Hunting activities and attack simulation exercises (Purple Team), identifying persistent threats and protection gaps.
• Security Automation (SOAR): Design and implement playbooks and automations using SOAR to streamline incident response, reduce MTTR (Mean Time To Respond), and scale security operations.
• Collaborate with development and infrastructure teams to assess risk and prioritize mitigations for critical vulnerabilities.
• Create and maintain security documentation (runbooks, playbooks, manuals) and contribute to the definition of information security policies and standards, aligned with frameworks such as NIST, MITRE ATT&CK, and ISO 27001.
• Support technical evaluation of new tools, define implementation requirements, and ensure effective integration of security solutions (Cloudflare, CrowdStrike, Netskope, etc.) in cloud environments (AWS/GCP).

Security Incident Response Specialist

SecOps Analyst