4–6 years of experience in security operations, incident response, threat intelligence, or a similar cybersecurity role Hands-on experience with SIEM, SOAR, and EDR platforms Strong understanding of endpoint security, cloud security principles, and environments such as AWS, Azure, or GCP Solid knowledge of networking concepts, operating systems (Windows, Linux, macOS), and common attack frameworks such as OWASP and MITRE Familiarity with identity and access management technologies, including SAML, OAuth, and RBAC Proven ability to remain calm under pressure, solve complex problems, and think inquisitively about emerging threats Excellent communication skills Relevant certifications such as GIAC, CISSP, or CompTIA Security+ are highly desirable