Information Security Analyst
Information Security Analyst at Domyn As an Information Security Analyst at Domyn, you will be the core operational layer of our security monitoring capability: triaging alerts, investigating security events, and building our SIEM function from the ground up on Microsoft Sentinel.
You will extend that visibility across perimeter controls, modern cloud-native infrastructure, and emerging AI-driven attack patterns — working closely with security engineering, DevOps, and governance to keep detection and response continuously improving.
Key responsibilities Monitor network and cloud environments for security events, triaging and investigating alerts across SIEM, EDR, and cloud-native logging sources.
Design, build, and operate a SIEM capability from zero — log source onboarding, workspace and architecture design,
correlation and detection rules, use case development — primarily on Microsoft Sentinel; experience with other SIEM platforms (Splunk, QRadar, Elastic, etc.) is a plus.
Own the full security event lifecycle: detection, triage, investigation, escalation, and remediation tracking.
Configure and tune perimeter and network security controls — IDS/IPS, Web Application Firewalls (WAF), and next-generation firewalls — and validate their effectiveness against current attack techniques.
Apply monitoring and detection practices to modern cloud-native and hybrid infrastructure (Azure primarily),
You will extend that visibility across perimeter controls, modern cloud-native infrastructure, and emerging AI-driven attack patterns — working closely with security engineering, DevOps, and governance to keep detection and response continuously improving.
Key responsibilities Monitor network and cloud environments for security events, triaging and investigating alerts across SIEM, EDR, and cloud-native logging sources.
Design, build, and operate a SIEM capability from zero — log source onboarding, workspace and architecture design,
correlation and detection rules, use case development — primarily on Microsoft Sentinel; experience with other SIEM platforms (Splunk, QRadar, Elastic, etc.) is a plus.
Own the full security event lifecycle: detection, triage, investigation, escalation, and remediation tracking.
Configure and tune perimeter and network security controls — IDS/IPS, Web Application Firewalls (WAF), and next-generation firewalls — and validate their effectiveness against current attack techniques.
Apply monitoring and detection practices to modern cloud-native and hybrid infrastructure (Azure primarily),