JD:<br /> Strong knowledge of SOC processes: monitoring, triage, incident response, escalation<br /> Hands on experience with SIEM tools (Splunk, QRadar, Sentinel, ArcSight, etc.)<br /> Hands on experience with SOAR platforms (Cortex XSOAR, Splunk SOAR, IBM SOAR, etc.)<br /> Incident Response & Threat Analysis (MITRE ATT&CK, kill chain, IOC analysis)<br /> Experience with security tool integration (EDR, IDS/IPS, Email Security, Firewall)<br /> Strong scripting/automation skills (Python, PowerShell, or Bash)<br /> Experience in playbook development and automation workflows<br /> Good understanding of network, endpoint, and cloud securityExperience in use case development, alert tuning, and false positive reduction<br /> Knowledge of cloud security platforms (Azure, AWS, GCP)<br /> Exposure to EDR/XDR tools (CrowdStrike, Defender, SentinelOne, Palo Alto Cortex)<br /> Experience with vulnerability management...