<div></div><div><div><div><div><ul><div>3 - 5 Years</div>
<div></div><div>1 Opening</div>
 <div>Hyderabad</div></ul></div><p></p><div><br>
<div><div>
</div></div></div></div><div></div><div><h3 class="jobSectionHeader"><b>Role description</b></h3>
<div><p>Role Summary</p>
<p>
We are looking for an experienced EDR Specialist with strong hands-on expertise in EDR/XDR platform administration and operations across multiple tools such as CrowdStrike Falcon, SentinelOne, Microsoft Defender for Endpoint (MDE), Palo Alto Cortex XDR, and Kaspersky. The role focuses on platform management, operational excellence, and enabling SOC teams to effectively detect, investigate, and respond to threats.</p>
<p>
Key Responsibilities</p>
<p>
EDR/XDR Platform Administration (80%)</p>
<ul><li>Administer and manage EDR/XDR platforms such as CrowdStrike (This a must have), SentinelOne, Defender for Endpoint, Cortex XDR, and Kaspersky</li></ul>
<ul><li>Manage full agent lifecycle including deployment, upgrades, troubleshooting, and decommissioning</li></ul>
<ul><li>Perform Proactive Threat Hunting</li></ul>
<ul><li>Build Custom Detection rules to improve the out-of-the-box detection for the customer.</li></ul>
<ul><li>Configure endpoint security policies, exclusions, prevention controls, and response actions</li></ul>
<ul><li>Experience in Identity, Device and Firewall modules of EDR</li></ul>
<ul><li>Manage RBAC, user access, device groups, tags, and organizational structure</li></ul>
<ul><li>Perform continuous health monitoring of agents and platforms to ensure optimal coverage and performance</li></ul>
<p>
Operational &amp; Incident Support</p>
<ul><li>Execute remote response actions such as host isolation, process termination, and file quarantine</li></ul>
<ul><li>Coordinate with IT and endpoint teams for remediation and recovery activities</li></ul>
<ul><li>Maintain incident documentation, evidence, and audit trails</li></ul>
<p>
Integrations &amp; Ecosystem Management</p>
<ul><li>Integrate EDR/XDR platforms with SIEM and SOAR solutions</li></ul>
<ul><li>Maintain and troubleshoot APIs, connectors, and data ingestion pipelines</li></ul>
<ul><li>Collaborate with identity, email security, and vulnerability management teams</li></ul>
<p>
Compliance, Reporting &amp; Governance</p>
<ul><li>Develop and maintain coverage, health, and compliance reports</li></ul>
<ul><li>Support audits by providing configuration evidence and operational documentation</li></ul>
<ul><li>Ensure adherence to organizational security and compliance standards</li></ul>
<p>
Required Skills &amp; Experience</p>
<ul><li>Hands-on experience as an EDR/XDR Administrator in enterprise environments</li></ul>
<ul><li>Strong experience with at least two EDR tools: CrowdStrike (sThis is a must), SentinelOne, MDE, Cortex XDR, or Kaspersky</li></ul>
<ul><li>Good understanding of endpoint operating systems: Windows, Linux, and macOS</li></ul>
<ul><li>Experience with SIEM integrations and SOC operational workflows</li></ul>
<ul><li>Strong troubleshooting, documentation, and communication skills</li></ul>
<p>
Nice-to-Have Skills</p>
<ul><li>Scripting experience with PowerShell or Python</li></ul>
<ul><li>Familiarity with MITRE ATT&amp;CK framework</li></ul>
<ul><li>Experience with cloud workload protection or XDR modules</li></ul>
<ul><li>Relevant security certifications (Microsoft, CrowdStrike, SentinelOne, Palo Alto)</li></ul>
<ul><li>Experience in Any of the leading DLP solutions.</li></ul></div>
<h3 class="jobSectionHeader"><b>Skills</b></h3>
<div><p>endpoint detection and response,endpoint security,mitre att&amp;ck,sentinelone,incident response</p></div></div></div></div><p></p>
<br><div><h3 class="jobSectionHeader"><b>About UST</b></h3>
<div>UST is a global digital transformation solutions provider. For more than 20 years, UST has worked side by side with the world&rsquo;s best companies to make a real impact through transformation. Powered by technology, inspired by people and led by purpose, UST partners with their clients from design to operation. With deep domain expertise and a future-proof philosophy, UST embeds innovation and agility into their clients&rsquo; organizations. With over 30,000 employees in 30 countries, UST builds for boundless impact&mdash;touching billions of lives in the process.</div></div>

EDR Specialist

Cyber Force

<div>Cairo, Egypt Hybrid Full-time</div>
<br><div><h2 class="jobSectionHeader"><b>About Cyber Force</b></h2>
<p>
Cyber Force is a cybersecurity consultancy delivering advisory, managed services, and operations to international clients. Our senior-led teams combine governance, engineering, and 24&times;7 response to turn cyber risk into measurable resilience.</p>
<h2 class="jobSectionHeader"><b>
Role Overview</b></h2>
<p>
We are looking for a Junior Cyber Defense Operations Analyst to join our Threat Detection &amp; Response team as a frontline defender. You will monitor, triage, and investigate security alerts across SIEM, EDR, and XDR platforms, perform initial incident analysis, escalate confirmed threats, and maintain shift-based coverage for our managed services clients and on-site engagements. You will also leverage AI-augmented tooling and agentic SOC capabilities that Cyber Force is actively building into its detection and response workflows.</p>
<h2 class="jobSectionHeader"><b>
Key Responsibilities</b></h2>
<ul><li>Monitor security alerts from SIEM (Elastic SIEM, Microsoft Sentinel), EDR/XDR (Defender XDR) across client environments</li>
<li>Triage and investigate alerts: analyze log data, correlate events, identify IOCs, determine true vs. false positives</li>
<li>Perform initial incident response: collect artifacts, preserve evidence, escalate to Tier 2/3 with structured handoff</li>
<li>Execute detection playbooks aligned with MITRE ATT&amp;CK</li>
<li>Analyze network traffic, endpoint telemetry, and identity/authentication logs</li>
<li>Maintain shift logs, case notes, and client-facing incident reports to SLA standards</li>
<li>Contribute to detection engineering: propose rule improvements, tune thresholds</li>
<li>Leverage AI-augmented tooling and LLM-based tools (Claude, ChatGPT) for alert enrichment and report drafting</li>
<li>Validate AI-generated investigation outputs from agentic SOC capabilities</li>
<li>Participate in purple team exercises and continuous training</li>
</ul><h2 class="jobSectionHeader"><b>Requirements</b></h2>
<ul><li>Bachelor&rsquo;s in CS, Cybersecurity, IT, or related (or equivalent practical experience)</li>
<li>0&ndash;1 year experience in SOC, cyber defense, or IT security (internships, labs, CTFs count)</li>
<li>At least one cert: CompTIA Security+, CySA+, BTL1, ISACA CCOA, or equivalent</li>
<li>Fluent English (written and spoken)</li>
<li>Foundational knowledge of SIEM, EDR/XDR, and log analysis</li>
<li>Networking fundamentals: TCP/IP, DNS, HTTP/S, firewalls, proxies, VPNs</li>
<li>Familiarity with MITRE ATT&amp;CK and common adversary TTPs</li>
<li>Demonstrated experience using LLM-based tools (Claude, ChatGPT) &mdash; this is a must</li>
<li>Willingness to work rotating shifts (24/7 coverage) and deploy to client sites</li>
<li>Elastic, Microsoft Sentinel, or Defender XDR experience &mdash; a strong plus</li>
<li>VICI VCDA (Viridian Certified Defense Associate) certification &mdash; a plus</li>
<li>French language skills &mdash; a plus</li></ul></div>
<br><div><h4 class="jobSectionHeader"><b>Role details</b></h4>
<div>Location Cairo, Egypt
</div><div>Type Full-time
</div><div>Mode Hybrid</div></div>

Junior Cyber Defense Operations Analyst

Standard Textile

<div><p>At Standard Textile, we&rsquo;re dedicated to providing comfort and care across generations. Guided by our values, we focus on solutions that serve our customers, support our associates, and strengthen our communities. Since 1940, we&rsquo;ve remained committed to creating better textiles&mdash;delivered seamlessly by experts who care.</p><p></p><p>
The <b>IT Security Analyst</b> is responsible for defending our manufacturing environment against cyber threats. Core duties include monitoring and triaging security alerts across endpoint, network, identity, and cloud telemetry; investigating and responding to incidents; hardening systems and infrastructure; managing vulnerabilities; and supporting security tooling such as XDR, EDR, email security, and firewalls.</p><p></p><p>
This role reports to and works directly with our IT Security Lead, who will mentor the IT Security Analyst on our tooling, playbooks, and environment. You will work firsthand with AI agents and automation built into our security operations. The ideal candidate has a foundation in security operations, strong fundamentals, and an interest in growing into broader IT cybersecurity work.</p><p></p><p><b>
Key Responsibilities:</b></p><ul><li><p>
Monitor XDR, EDR, and other security tooling to detect, triage, and investigate suspicious activity across endpoints, network, identity, and cloud environments.</p></li><li><p>
Use AI agents and automated workflows to accelerate alert triage, enrichment, and initial investigation.</p></li><li><p>
Assist in incident response activities (containment, eradication, recovery, and post-incident review) and maintain the playbooks and runbooks that support them.</p></li><li><p>
Participate in threat hunting using known TTPs and threat intelligence and help tune detection logic to reduce false positives.</p></li><li><p>
Run the vulnerability management lifecycle (scanning, prioritization, coordination of remediation, and verification).</p></li><li><p>
Support identity and access controls (privileged access, conditional access, account reviews).</p></li><li><p>
Assist with hardening endpoints, servers, Active Directory, and cloud workloads against common attack techniques (e.g., MITRE ATT&amp;CK).</p></li></ul><p></p><p><b>
Collaboration and Communication</b></p><ul><li><p>
Partner with IT infrastructure, application, and operations teams to embed security into systems, projects, and day-to-day operations.</p></li><li><p>
Partner with Security Lead to identify high-leverage automation opportunities and help build, evaluate, and tune agentic workflows for the SOC.</p></li><li><p>
Communicate security risks, incidents, and mitigation strategies clearly to technical teams, senior management, and, when needed, external partners or incident response retainers.</p></li></ul><p></p><p><b>
Qualifications Include:</b></p><p></p><ul><li><p>
Bachelor&rsquo;s degree in Cybersecurity, Information System Analytics, Computer Science, or a closely related discipline.</p></li><li><p>
1&ndash;3 years of experience in a SOC, IT security, or closely related IT role (internships and co-ops count). Firsthand exposure to incident response, networking, or system administration.</p></li><li><p>
Solid fundamentals in cybersecurity, common attacker tradecraft (e.g., MITRE ATT&amp;CK), networking, and Windows/Linux/Active Directory administration. Firsthand exposure to a SIEM, XDR, or EDR platform is a plus.</p></li><li><p>
Relevant certifications such as CompTIA Security+, CySA+, Network+, Microsoft SC-200, Cisco CyberOps Associate, Blue Team Level 1 (BTL1), or GIAC GSEC/GCIH are preferred.</p></li></ul><p></p><p>
Proudly, Standard Textile has earned a title of US Best Managed Company for the <b>fifth year</b> running, an honor awarded by Deloitte Private and The Wall Street Journal, celebrating the exceptional achievements of American private companies and their management teams.</p><p></p><p>
Standard Textile is an Equal Opportunity Employer, including Veterans and Individuals with Disabilities.</p><p></p><p><i>
Join us!</i></p></div>

IT Security Analyst

FUKU

<div>Senior Key Account Manager (KSA) &ndash; Ansen Technology<br>
<br>
About Ansen Technology<br>
Ansen Technology is a global AI-empowered cybersecurity leader, serving governments, critical infrastructure, telecom, energy, and enterprises worldwide. With a global operations center in Abu Dhabi and offices across APAC, MENA, and North America, Ansen focuses on:<br>
<ul><li>Government-grade security solutions</li><li>National-level SOC projects</li><li>Memory security (MDPS)</li><li>Advanced threat protection (ATP)</li><li>Managed Detection and Response/Extended Detection and Response (MDR/XDR)</li><li>Endpoint and cloud security</li><li>Compliance services covering NESA, SAMA, NCA, PDPL, ISO27001, GDPR, etc.</li></ul>
Ansen holds CREST certification in MENA and serves numerous Fortune 500 clients and core government agencies.<br>
<br>
About the Role (Riyadh, KSA)<br>
<ul><li>Lead business development and key account management activities in Saudi Arabia</li><li>Drive the full sales cycle (LTC): lead generation, pre-sales, proposal, negotiation, contract, and payment collection</li><li>Build and manage relationships with C-level and senior stakeholders in government, critical infrastructure, telecom, and energy sectors</li><li>Collaborate cross-functionally with solution, delivery, and finance teams to ensure project success</li><li>Represent Ansen at industry events to strengthen the company&rsquo;s brand presence in KSA</li></ul><br>
Requirements<br>
<ul><li>Minimum 5 years&rsquo; experience in KSA/GCC business development, key account management, or cybersecurity sales</li><li>Proven track record in complex cybersecurity or ICT solution sales</li><li>Deep understanding of SOC, PenTest, MDR/XDR, endpoint, cloud, and identity security solutions</li><li>Familiarity with KSA compliance, procurement processes, and local regulations</li><li>Fluent in English and Arabic; willingness to travel frequently within KSA and GCC</li></ul><br>
If you are interested in this high-impact leadership role, please share your latest CV for our review. We look forward to discussing further details with you.</div>

Senior Key Account Manager

Asyad Group

<p><b>Asyad </b>oversees Oman&rsquo;s logistics ecosystem including ports, shipping, and freight services.</p><p><i>As a </i><i><b>Cyber Security</b></i> <i>at Asyad Group - this role focuses on detecting, investigating, and responding to cyber threats to protect an organization&rsquo;s systems, data, and critical infrastructure.</i></p><p><b>Job Description:</b></p><p><i><b>1. Incident Detection &amp; Response</b></i></p><p>Monitor security alerts using SIEM tools</p><p>Investigate suspicious activities and cyberattacks</p><p>Perform incident triage, analysis, and containment</p><p><i><b>2. Threat Hunting &amp; Monitoring</b></i></p><p>Proactively search for hidden threats in systems</p><p>Analyze logs (firewalls, endpoints, network traffic)</p><p>Use tools like:</p><p>EDR/XDR (e.g., CrowdStrike, SentinelOne)</p><p><i><b>3. Digital Forensics &amp; Investigation</b></i></p><p>Conduct malware analysis and forensic investigations</p><p>Identify root cause of incidents</p><p>Assess scope and impact of breaches</p><p><i><b>4. Containment &amp; Recovery</b></i></p><p>Isolate affected systems</p><p>Remove threats and restore operations</p><p>Develop remediation plans</p><p><i><b>5. Documentation &amp; Reporting</b></i></p><p>Create incident reports and post-mortem analysis</p><p>Recommend security improvements</p><p>Maintain incident logs and compliance records</p><p><i><b>6. Collaboration</b></i></p><p>Work with:</p><p>SOC (Security Operations Center) teams</p><p>IT and network teams</p><p>External cybersecurity vendors</p><p>7. Security Improvement</p><p>Improve incident response processes</p><p>Develop playbooks and automation</p><p>Stay updated on emerging cyber threats</p><p><b>Requirements:</b></p><p>Bachelor&rsquo;s degree in IT, Cybersecurity, or related field</p><p>Certifications (preferred):</p><p>CISSP</p><p>CEH</p><p>CompTIA CySA+ / Security+</p><p>Experience:</p><p>2&ndash;5 years (junior-mid)</p><p>5+ years (senior roles)</p><p>Job Type: Full-time</p><p>Pay: From RO1,500.000 per month</p><p>Work Location: In person</p>

Cybersecurity / Incident Response Specialist (Asyad Group)

Openkyber

<div><p><b>Role Overview,</b> The SOC Lead / Incident Manager will oversee 24x7x365 Security Operations Center (SOC) functions for the Congressional Budget Office vSOC program. This role requires strong leadership in incident response, SLA enforcement, and team management, with hands-on expertise in Microsoft Sentinel and Defender environments. The SOC Lead will serve as the escalation authority, ensuring operational excellence, audit readiness, and compliance with federal frameworks such as NIST SP 800-53 and FISMA .</p>
<p><b>Key Responsibilities</b></p>
<ul><li>Lead Tier I/II/III SOC operations with full escalation authority.</li>
<li>Enforce SLA-driven performance standards ( 15 min triage, 1 hr investigation, 2 hr escalation).</li>
<li>Oversee the incident lifecycle from triage through investigation, response, and closure.</li>
<li>Act as incident commander during high-severity events, coordinating stakeholder communication.</li>
<li>Review and approve incident classifications, escalations, and remediation actions.</li>
<li>Conduct daily/weekly operational reviews, tracking incident trends and performance metrics.</li>
<li>Collaborate with engineering teams to improve detection rules and reduce false positives.</li>
<li>Ensure all incidents are documented and audit-ready for compliance assessments.</li>
</ul><p><b>Required Skills &amp; Qualifications</b></p>
<ul><li>8 10+ years of experience in SOC operations and incident management .</li>
<li>Strong expertise in Microsoft Sentinel, Defender XDR , and SIEM/SOAR platforms (Splunk, QRadar, ELK).</li>
<li>Proven ability to lead cross-functional SOC teams and enforce SLA compliance.</li>
<li>Hands-on experience with ServiceNow, Jira, Power BI, KQL, and Log Analytics .</li>
<li>Deep knowledge of NIST SP 800-53, NIST 800-61, FISMA, and FedRAMP frameworks.</li>
<li>Certifications (Preferred / Mandatory) CISSP (Certified Information Systems Security Professional) GIAC (GCIH / GCIA / GCFA) Microsoft Certified: Security Operations Analyst (SC-200) ITIL / PMP (optional but valuable for governance)</li>
</ul><p>PALNAR, the trade name of Palayekar Companies Inc. founded in 1997, delivers global software and technology services. Headquartered in Cranbury, New Jersey - United States, with operations in India (Noida and Goa), OpenKyber provides software consulting, development, IT Support service and ongoing technology support worldwide.</p>
<p><b>For applications and inquiries, contact:</b> hirings@openkyber.com</p></div>

SOC Manager

Siege Media

<div><p>Siege Media is a growing and remote-first organic growth agency! We are nationally recognized on Inc.&rsquo;s Best Workplaces list and Inc. 5000 list, highlighting the 5000 fastest-growing private companies. Interested in working with the Siege team? We currently have a spot open for a talented Freelance Cybersecurity Content Writer to help us continue to deliver great content for our world-class clients.</p><p>
Learn more about working at Siege by experiencing our culture on Instagram and checking out our work on Dribbble!</p><p>
Siege Media values diversity. We encourage people of color, LGBTQIA+ folks, veterans, parents and those with disabilities to apply. We are committed to helping all people succeed at Siege. If you require reasonable accommodation to complete our application or interview process, please let us know.</p><p><b>
Responsibilities</b></p><ul><li>
Write comprehensive articles on a variety of topics including Zero Trust architecture, threat intelligence, cloud security, (CSPM/CWPP), and incident response</li><li>
Demonstrate the ability to adapt tone and technical depth to speak to diverse audience, from C-suite executives (CISCOs) to hands-on SOC analysts</li><li>
Have a firm grasp on writing effective, high-CTR titles that resonate with the cybersecurity community and attract high-authority press</li><li>
Successfully implement feedback from editors and clients to ensure 100% technical accuracy</li><li>
Deliver content that doesn't just explain &quot;what&quot; a threat is, but provides actionable strategies for improving a client's security posture</li></ul><h3 class="jobSectionHeader"><b>
Required Skills</b></h3><ul><li>
2-3 years of experience as a content writer, specifically focused on cybersecurity or high-level InfoSec (ideally published on reputable news sites, industry blogs, or major vendor blogs)</li><li>
Extensive knowledge of niche topics including IAM, EDR/XDR, Network Security, Ransomware trends, and Compliance frameworks (SOC2, GDPR, HIPAA, NIST)</li><li>
Experience writing for the web with a focus on long-form guides, &quot;how-to&quot; mitigation articles, security tool comparison posts, trend reports, and thought leadership content on the evolving threat landscape</li><li>
Strong interpersonal skills, with ability to form productive working relationships in a fully remote environment</li><li>
Strong project management skills, with ability to handle multiple projects while still working effectively</li><li>
Ability to set priorities, meet deadlines, and work independently</li><li>
A heavy focus on technical accuracy, fact-checking, and creating quality content that builds brand trust</li></ul><h3 class="jobSectionHeader"><b>
Suggested Skills</b></h3><ul><li>
4-year university degree in computer science, engineering, or a related field</li><li>
Intermediary SEO knowledge with a working knowledge of SEO tools and how they can be used to improve client websites</li><li>
Experience collaborating with design teams and giving guidance on design and UX best practices</li></ul><p><b>
Please plan to upload the following information during the application process:</b></p><ul><li>
Your resume</li><li>
A short introduction/cover letter</li><li>
A link to your portfolio with at least 3 writing samples that demonstrates your ability to write about cybersecurity at varying levels of technical complexity</li></ul><p>
</p><p>6nXhlH08yo</p></div>

Freelance Cybersecurity Content Writer

Search 18+ Xdr jobs near you this May. New roles added regularly across leading industries. Apply today.