SOC & IR Specialist

Summary

Data has never been more valuable and vulnerable. As cybercriminals become more sophisticated and regulations more strict, organizations struggle to answer one key question: “Is my data safe? "

At Varonis, we see the world of cybersecurity differently. Instead of chasing threats, we believe the most practical approach is protecting data from the inside out. We’ve built the industry’s first fully autonomous Data Security Platform to help our customers dramatically reduce risk with minimal human effort.

At Varonis, we move fast. We’re an ultra-collaborative company with brilliant people who care deeply about the details. Together, we’re solving interesting and complex puzzles to keep the world’s data safe.

We work in a flexible, hybrid model, so you can choose the home-office balance that works best for you.

Overview:

We are seeking a highly skilled and experienced Security Operations Center (SOC) & Incident Response (IR) Specialist to join our security team. This role requires a deep understanding of cybersecurity threats, incident response, forensic, and advanced threat hunting techniques. The ideal candidate will possess a strong technical background, excellent problem-solving skills, and a passion for protecting our organization's critical assets.

The Requirements:

• 5+ years’ experience working within a security operation/Security architecture teams.
• 5+ years’ experience working across multiple security disciplines (DFIR, log analysis,
• Deep understanding of network security, endpoint security, cloud security, and security operations.
• packet analysis, reverse engineering, detection strategies, etc.)
• Experience working with SOAR platforms for security automation.
• Demonstrated knowledge and experience with MITRE ATT&CK Framework
• Proficiency in using security tools and technologies, such as SIEM, EDR, SOAR, EASM, CSPM and threat intelligence platforms.
• Proficient in Azure and AWS Cloud platforms
• Strong scripting and programming skills (e.g., Python, PowerShell)- Advantage.
• Advanced knowledge of threat intelligence and threat hunting techniques.
• Ability to analyze complex security problems and develop effective solutions.
• Strong critical thinking and analytical skills.
• Proven ability to lead and motivate team members.
• Strong problem-solving and decision-making skills.
• Excellent written and verbal communication skills.
• Ability to communicate technical information to both technical and non-technical audiences.
• If you are a highly motivated and skilled cybersecurity professional with a passion for protecting critical infrastructure, we encourage you to apply!
  
  

• Incident Response: Lead complex incident response efforts, including containment, eradication, and recovery.
• Conduct in-depth investigations of security incidents, analyzing logs, network traffic, and other relevant data sources.
• Develop and implement effective incident response plans and playbooks.
• Threat Hunting: Proactively identify and investigate advanced threats and vulnerabilities.
• Utilize advanced threat hunting techniques, including behavioral analysis, anomaly detection, and threat intelligence.
• Develop and implement threat hunting strategies to stay ahead of emerging threats.
• Security Operations: Monitor, analyze, and respond to security alerts and events.
• Oversee the day-to-day operations of the SOC, including monitoring, alerting, and reporting.
• Function as focal point for escalation to the team.
• Ensure effective utilization of security tools and technologies.
• Continuously improve security processes and procedures to enhance efficiency and effectiveness.
• Work at a high technical level and be capable of identifying threats, and threat vectors that cause security events.