Company: Defendlab
Location: On-Site, Damascus
Employment Type: Full-Time
Department: Security Operations Center (SOC)

Job Purpose

Monitor, detect, and respond to security incidents in real-time to protect Defendlab and client environments from cyber threats.

Key Responsibilities

• Monitor SIEM and security alerts, triage incidents, and escalate appropriately.
• Conduct initial investigations and root cause analysis.
• Correlate security events across multiple systems.
• Document incidents, maintain logs, and support reporting requirements.
• Collaborate with incident response and threat intelligence teams.
• For L2: handle complex incidents, advanced threat detection, and coordination with stakeholders.

Required Skills & Qualifications

• Bachelor's degree in Cybersecurity, Information Security, or related field.
• 1–3 years for L1, 3+ years for L2 in SOC or security monitoring.
• Familiarity with SIEM tools (Splunk, ELK, QRadar, or similar).
• Knowledge of network protocols, firewalls, IDS/IPS, and endpoint security.
• Strong analytical, problem-solving, and communication skills.