Development and adjustment of use cases and playbooks, including appropriate detections for new threats/vulnerabilities. Threat hunting with different monitoring tools, such as EDR (Cortex, Microsoft Defender ATP). Ensure the compliance of the corporate security policy, finding and communicating deficiencies and its related risks.Security incident handlingHighly experienced in SIEM solutions (Splunk, Qradar, Sentinel, Elastic)Experience with monitoring cloud-based enviorments (o365, Microsoft Azure AD)Understanding of malware, attack vectors, MITRE ATT&CK tactics and techniques. Automation skills, primarily python and powershell.