Sr. Consultant - SOC Management Job

Role Description

Position Name: Cyber Security Incident Handler

We are seeking an experienced and proactive Senior Cybersecurity Incident Handler to join our SOC/Cyber Defense team. The ideal candidate will have deep expertise in handling complex security incidents, applying advanced detection and response techniques, and guiding enterprise-wide incident response strategies. This role requires a strong understanding of modern threat landscapes, hands-on technical skills, and the ability to coordinate across departments during security events.

Key Responsibilities:

• Lead and manage the end-to-end lifecycle of security incidents, including detection, triage, containment, eradication, recovery, and post-incident analysis,
• Utilize SIEM, SOAR, EDR, and threat intelligence platforms (e.g., Microsoft Sentinel, Splunk, CrowdStrike Falcon, Palo Alto Cortex XSOAR, MISP) to identify and respond to threats,
• Conduct forensic analysis of endpoints, networks, and logs using tools like FTK, Volatility, Wireshark, and ELK Stack,
• Develop, refine, and test incident response plans, playbooks, and tabletop exercises,
• Collaborate with threat hunters, SOC analysts, vulnerability management, and threat intelligence teams to enhance threat detection and mitigation,
• Generate detailed reports and provide executive summaries on security incidents.
• Mentor junior analysts and help develop cybersecurity capabilities across the organization.

Required Skills & Qualifications:

• 7–10 years of hands-on experience in incident response, SOC operations, or related cybersecurity roles,
• Expertise in:
  • SIEM/SOAR platforms
  • Endpoint Detection and Response (EDR) tools
  • Network forensics and malware analysis
  • MITRE ATT&CK and cyber kill chain frameworks
• Strong knowledge of network protocols, Windows/Linux internals, and cloud security (AWS/Azure/GCP),
• Familiarity with compliance and standards: NIST 800-61, ISO 27035, CIS Controls, GDPR, and HIPAA.

Certifications (Required/Preferred):

Required (at least one):

• GIAC Certified Incident Handler (GCIH)
• Certified Incident Handler (ECIH)
• Certified Information Systems Security Professional (CISSP)
• Certified SOC Analyst (CSA)

Preferred :

• GIAC Cyber Threat Intelligence (GCTI)
• GIAC Cloud Security Automation (GCSA)
• Microsoft Certified: Cybersecurity Architect Expert
• Google Cybersecurity Professional Certificate

Nice to Have:

• Experience with AI/ML-based threat detection platforms
• Exposure to zero trust architectures and XDR implementations
• Understanding of OT/ICS incident response (for industrial environments)