• Perform hands‑on detection, analysis, containment, and eradication activities during security incidents.
• Conduct advanced technical investigations including malware analysis, forensics, and threat hunting.
• Contribute to the development, maintenance, and improvement of detection, response, and recovery procedures.
• Conduct internal penetration tests, red‑team style assessments, and exploit development where required.
• Simulate realistic attacker techniques (TTPs) including black‑hat methodologies within ethical and authorized boundaries.
• Identify vulnerabilities and misconfigurations across infrastructure, applications, identities, endpoints, and cloud solutions.
• Operate and optimize security tools (EDR, SIEM, SOAR, threat intel platforms, vulnerability scanners).
• Develop detection rules, correlation logic, dashboards, and security automation playbooks.
• Participate in security projects, tabletop exercises, and improvement initiatives.
• Provide technical input on MSSP findings, alerts, escalations, and service quality.
• Translate technical findings into business-relevant risk statements
• Contribute to audits (ISO27001, NIS2, DORA etc.), control evidence, and security reporting

Qualifications you have for this role

• Degree in IT, Cybersecurity, or related field (hands-on experience considered)

• Strong security operations experience: incident response, threat hunting, digital forensics

• Hands-on in penetration testing, ethical hacking, and attacker mindset techniques

• Familiarity with offensive security frameworks (MITRE ATT&CK, OWASP, PTES)

• Experience with SOC/MSSP environments and security vendors

• Skilled in scripting or automation (PowerShell, Python, etc.)