Technical Skills:
Security Monitoring & Analysis SIEM Monitoring & Alert Triage Log Analysis (Firewall, Server, Endpoint) Threat Detection & IOC Analysis Incident Identification & Escalation, Network & Traffic Analysis TCP/IP, OSI Model DNS, HTTP/HTTPS, SMTP Wireshark (Packet Analysis) Network Traffic Monitoring, Threats & Attack Techniques Malware (Virus, Trojan, Ransomware) Phishing & Social Engineering Brute Force & Credential Attacks Web Attacks (XSS, SQL Injection – Basics), Endpoint & Security Controls Antivirus / EDR Concepts Firewalls (Rule Basics) IDS/IPS (Signature & Anomaly) VPN (IPsec, SSL – Basics), Vulnerability & Risk Vulnerability Scanning (Nessus – Basics) Risk, Threat & Vulnerability Understanding CVE & CVSS Basics, Operating Systems Windows Security Logs Linux Fundamentals & Logs, Incident Response Basics Incident Lifecycle (Detect, Analyze, Respond) Evidence Collection (Basics) Security Documentation & Reporting