Bachelor’s degree in cybersecurity, information technology, computer science, digital forensics, or a related discipline is recommended; equivalent expert-level practical experience will be considered.
Typically, 5+ years of progressive experience in security operations, incident response, digital forensics, threat hunting, or Cyber Defense, including independent handling of complex and high-impact incidents.
Proven experience with Crowdstrike EDR and Exposure Management platforms , Proofpoint, Microsoft Purview and Defender services.
Demonstrated expert-level experience investigating incidents across endpoint, identity, cloud, SaaS, email, network, and data-security domains and correlating multiple telemetry sources into defensible conclusions.
Proven ability to execute technical incident-response activities, make risk-based decisions under pressure, coordinate multiple technical teams, and communicate clearly with operational and leadership stakeholders.
Deep practical knowledge of incident handling, attacker behavior, evidence handling, root-cause analysis, containment strategies, recovery validation, After Action Reviews, and corrective-action management.
Advanced experience with SIEM and security-operations tooling, including complex query development, investigation workflows, telemetry validation, operational reporting, and detection-tuning feedback.
Strong experience with endpoint detection and response, identity and access telemetry, email security, network security, cloud and SaaS investigation, DLP, and vulnerability or exposure management platforms.
Demonstrated ability to assess vulnerability exploitability and exposure paths, apply threat and business context, drive urgent remediation, and verify risk-reduction outcomes.
Proven experience improving an operational security service through measurable changes to processes, playbooks, detections, tooling, automation, service-provider performance, or ways of working.
Experience leading or delivering cross-functional Cyber Defense improvement projects from problem definition and requirements through implementation, adoption, and outcome validation.
Demonstrated ability to turn incident lessons learned and After Action findings into practical corrective actions, maintain ownership across teams, and verify that changes effectively address the underlying weakness.
Practical experience leading DLP or sensitive-data investigations with discretion, defensible documentation, and appropriate coordination with Legal, HR, Privacy, or Insider Risk stakeholders.
Advanced working knowledge of threat intelligence, indicators of compromise, threat-hunting methods, attack-path analysis, and frameworks such as MITRE ATT&CK.
Strong analytical judgment, technical writing, project execution, and verbal communication skills, including the ability to translate complex findings into business impact, risk, options, decisions, and prioritized improvement work.
Willingness to participate in scheduled on-call, weekend, or holiday coverage where required by the Cyber Defense operating model.
Relevant advanced certifications such as GCIH, GCFA, GCIA, GNFA, CISSP, or comparable platform-specific certifications are preferred but not required.
Alignment with Ralliant values and the Ralliant Business System (RBS), including ownership, transparency, accountability, respect, and continuous improvement.

Cyber Defense Specialist

Summary

Requirements

Additional Requirements

Sign in to see the full job details

Report this Job / Company (রিপোর্ট)

Summary

Requirements

Additional Requirements

Sign in to see the full job details

Report this Job / Company (রিপোর্ট)

Similar jobs