Cybersecurity Defense Specialist

Lendo

Monitor and analyze security alerts daily, performing accurate triage to determine severity, priority, and required response actions.

Build, tune, and enhance security detection rules and use cases across SIEM and other monitoring platforms to improve threat visibility and reduce false positives.

Coordinate and execute incident response activities, including containment, eradication, and recovery, while minimizing business impact.

Lead and support incident investigations, conduct root cause analysis, forensic activities, and preparing incident reports.

Conduct post-incident reviews, capturing lessons learned and ensuring continuous improvement of SOC processes and capabilities.

Develop, maintain, and refine incident response playbooks, escalation workflows, and an incident knowledge repository.

Collaborate with IT, security, and business teams to strengthen detection coverage and improve incident handling efficiency.

Oversee and manage relationships with Managed Security Service Providers (MSSPs), ensuring alignment with organizational security standards and SOC requirements.

Contribute to threat intelligence initiatives by identifying patterns, emerging threats, and potential vulnerabilities.

Participate in SOC readiness activities, including tabletop exercises, red team/blue team simulations, and continuous skills development.