Description

In this role, you will enhance HelloFresh's security by monitoring SOC activities, triaging incidents, and optimizing security solutions. Your day-to-day responsibilities will involve leveraging threat intelligence and collaborating with stakeholders to ensure effective incident response.

Requirements

• •Security monitoring and incident response experience in public cloud environments
• •Experience with cloud SIEM & SOAR platforms, DDoS mitigation and preventing tools, and Layer-7 Web-based perimeter security controls
• •Understanding of network intrusion methods, containment, segregation techniques, and technologies such as Sandboxes and Intrusion Detection/Prevention Systems (ID/PS)
• •Ability to operate EDR, EPP and Device Management solutions as per best security practices
• •Decent programming skills to enable data processing, IaC and security automations
• •Good communication and reporting skills
• •Experience with log analysis stacks like ElasticSearch, Splunk/SumoLogic

Tasks

• •Monitor SOC activities and build use cases
• •Conduct initial triage of security events and incidents
• •Document progress throughout the Incident Response Lifecycle
• •Automate and optimize security solutions like EDR/EPPs
• •Operate conventional firewalls, IDS/IPS, and email security tools
• •Leverage threat intel feeds to sweep environments against APT campaigns
• •Prepare status reports and follow up with stakeholders via Jira
• •Facilitate incident detection and response in AWS cloud environments

Tools & Technologies

Benefits