SecOps Analyst

About the Role

Key Responsibilities

• · Monitor SIEM dashboards (Splunk / ELK) and triage security alerts across cloud infrastructure, application logs, and endpoint telemetry; escalate confirmed incidents per runbook.
• · Conduct first-response investigation and containment for security incidents including account compromise, data exfiltration attempts, malware, and DDoS events.
• · Maintain and improve detection rules, correlation searches, and alert thresholds in the SIEM; reduce false-positive rate while increasing signal fidelity for Rubiscape-specific threat patterns.
• · Operate vulnerability management workflows: ingest scanner output (Qualys, Tenable, or equivalent), track remediation status, and report SLA compliance to security engineering.
• · Contribute to threat intelligence enrichment — mapping IOCs and TTPs from CERT-IN advisories, ISACs, and threat feeds to Rubiscape’s detection coverage.