Security Operations (SecOps) Specialist

Security Operations (SecOps) Specialist

About the Role

We are looking for an experienced Security Operations (SecOps) Specialist with approximately 3 years of experience to join our Information Security team.

The role involves hands-on operation, maintenance, and troubleshooting of advanced security solutions, with a focus on Check Point Firewalls, CyberArk PAM, Trend Micro EDR/XDR, WAF and DDoS protection solutions, as well as supporting security incident investigation and remediation.

The position also includes leveraging AI and Generative AI technologies to investigate security events, analyze threats, and address emerging security risks in AI-enabled environments.

Responsibilities

• Manage, configure, maintain, and troubleshoot Check Point Firewalls, including rules and security policies.

• Operate and maintain WAF and DDoS protection solutions, with an emphasis on Radware, Reblaze, and Cloudflare.

• Manage and maintain CyberArk PAM, including identity and privileged access management.

• Operate Trend Micro Vision One / Apex One and investigate EDR/XDR alerts.

• Support email security solutions and investigate phishing and malware threats.

• Work closely with the SOC, respond to security alerts, perform initial Incident Response investigations, and support remediation processes.

• Use AI, Generative AI, and automation tools to analyze security alerts and logs, identify anomalies, and accelerate security investigations.

• Support the identification and mitigation of emerging cybersecurity risks in environments that incorporate AI technologies.

Requirements

• Approximately 3 years of experience in a SecOps, SOC Tier 2, SOC Analyst, or similar security operations role.

• Proven hands-on experience managing, maintaining, and troubleshooting Check Point Firewalls.

• Hands-on experience with CyberArk PAM.

• Hands-on experience with Trend Micro solutions and investigating alerts in EDR/XDR environments.

• Practical familiarity with WAF solutions, preferably Radware, Reblaze, or Cloudflare.

• Familiarity with SOC environments and SIEM/SOAR solutions.

• Strong understanding of networking and security protocols, including TCP/IP, HTTP/S, SSL/TLS, and DNS.

Advantage

• Experience using AI-driven security tools, automated analysis solutions, or AI capabilities within SOC/SecOps environments.

• Understanding of cybersecurity risks related to AI, such as Prompt Injection and Data Leakage.

• Experience leveraging AI tools for security investigation and threat analysis.