Security Monitoring and Triage Specialist

Seniority

• L3 (Intermediate)

Educational Qualifications

• Bachelor’s Degree (3-year) in Information Technology, Computer Science, Information Systems, Cyber Security, or a related field.

Relevant Experience

• 5–10 years’ experience working within a Security Operations Centre (SOC), with a strong focus on threat hunting, threat validation, and security monitoring.
• Strong working knowledge of Kusto Query Language (KQL).
• Proven experience monitoring and analysing security events using Security Information and Event Management (SIEM) platforms.

Required Certifications

• Microsoft Certified: Information Security Administrator (SC-401)
• CompTIA Cybersecurity Analyst (CySA+)

Key Responsibilities

• Responsible for detecting, analysing, and prioritising security incidents in real time.
• Monitor security alerts and events using SIEM platforms to identify potential threats.
• Investigate and validate security events, distinguishing genuine threats from false positives.
• Perform threat hunting and initial incident triage to support timely response activities.
• Escalate high-priority security incidents in accordance with established incident response procedures.
• Collaborate with security operations and incident response teams to ensure effective threat management and continuous monitoring.