Specialist - Cyber Security Operations

About the role

Join the world’s largest brewer as a Cyber Incident Responder, working in a 24x7 shift model to protect AB‑InBev from sophisticated threats. You will collaborate with a team of incident responders, investigate security alerts, and drive remediation across on‑premise and cloud environments.

Key responsibilities

• Monitor, investigate and respond to security alerts from SOC tools such as EDR, IDS/IPS, Web proxy, SIEM, and cloud platforms like Microsoft Defender for Cloud and AWS GuardDuty.
• Correlate log sources, create incident storylines, and own the end‑to‑end response process until resolution and documentation.
• Conduct threat hunting using TTPs, IOCs and hypotheses, and act as Incident Commander during critical incidents.
• Collaborate with automation, data‑science, NOC, Infra and Cloud Ops teams to automate repetitive tasks and improve defensive controls.
• Develop and maintain incident response SOPs, run‑books and contribute to security monitoring tool enhancements.

Required profile

• Bachelor’s degree in Computer Science, Information Systems or equivalent.
• 3–5 years of experience in incident response, SOC operations or related technical security roles.
• Strong stakeholder communication skills and ability to work in a 24x7 shift schedule.

Required skills

• Hands‑on experience with commercial cyber tools: EDR, SIEM, CDR, Web Proxy.
• Proficiency with native Windows and cloud security tools: Windows Sysinternals, Microsoft Defender, AWS GuardDuty, Orca Security.
• Advanced knowledge of operating systems: Windows, Linux, Android, iOS, macOS.
• Threat hunting and security event analysis (intermediate to advanced).
• Incident investigation, correlation and storytelling (advanced).
• Preferred certifications: CEH, CHFI, CompTIA Security+.