BA/BS/BE or MS degree in IT, Computer Science or equivalent required.
8+ years of experience in one or more of the following areas: SIEM administration, Linux OS administration, networking, Windows OS, EDR, Sentinel and NDR.
3+ years of experience with SOAR platforms such as FortiSOAR, Phantom, Cortex, XSOAR, Swimlane, etc.
2+ years of experience in Microsoft Azure Sentinel stack.
Certification in Azure AZ900, SC200, SC100, etc.
Working knowledge of security-related scripting, Python, SOAP/REST APIs, JSON, HTML/CSS, JavaScript, XML, GO, Kusto/KQL, PowerShell.
Experience with SOC SOPs, playbooks, work instructions, and/or other process documents.
Relevant professional certifications in information technology or cloud security e.g. CISSP, CCSP, TOGAF, SIEM Certifications, Azure certifications, etc.
In-depth understanding of compliance and security controls and various industry standards - NIST, NESA, CIS, etc.
Strong understanding of computer science: algorithms, data structures, databases, operating systems, networks, and tool development.
Network infrastructure understanding, advanced knowledge of TCP/IP and Internet protocols.
Strong ability to communicate, write clearly, and speak authoritatively to different audiences.
Good knowledge in Firewalls, VPN, Intrusion detection and prevention systems, anti-virus and content filtering, URL filtering, authentication solutions, switches, routers, VoIP, DMZ.