SOC Team Leader

At least 5 years in SOC services with advanced security knowledge, SIEM tools (IBM QRadar, Splunk, Sentinel or others), SOAR (Demisto, Phantom, etc.) and TIP (IOCs, MISP, etc.) ) Ticketing (ServiceNOW, ITSM or others)
Design, implementation and testing of use cases / palybooks
Asset and security assessment tools (Shodan, Nmap, Qualys, Nessus, Burp suite, Empire, Honeypots, Sandboxing, etc.)

At least 5 years of experience in several of these areas of knowledge:

• In early warning processes, collaboration with CERTs and digital surveillance

• In security orchestration tools (alerts, automated analysis, mitigation and remediation processes, etc.) together with the development and integration of new use cases and report maintenance

• In detection and response analytical tools, and user behavior analysis (EDR Cortex, Windows Defender, ...)

• In security reviews, ethical hacking exercises and / or penetration testing

• In active defense processes, through the use of decoys by zones

• In search (hunting) of threats, analysis of malware and forensic analysis of security incidents (artifacts, etc.)