Ability to perform technical analysis of phishing campaigns.
Experience evaluating detection capabilities of security tools and creating custom detection rules.
Knowledge of SIEM, EDR/XDR and deception technology principles.
Basic knowledge of incident response processes.
Ability to analyze security events and incidents, including their documentation and escalation.
Basic experience with automating repetitive security tasks.
Foundations of static and dynamic malware analysis.
Basic scripting skills (Python, Bash).
Basic orientation in network and application security.
Basic knowledge of web application penetration testing, both manual and using automated tools.
Basic familiarity with security standards and frameworks, e.g. MITRE ATT&CK, MITRE D3FEND, OWASP.

Professional certifications in information and cybersecurity, e.g. CompTIA Security+, CySA+, Pentest+, OSWA, OSDA, or OSCP.
Experience from CTF competitions, bug bounty programs or personal projects, or recorded CVEs.
Experience working in a SOC (Security Operations Center) environment at L1 / L2 level.

Analytical and critical thinking.
Independent, responsible and thorough approach to task-solving.
Attention to detail and ability to work with incomplete information.
Proactive approach to resolving security issues.
Ability to effectively organize work and meet deadlines.
Willingness to continuously learn in the field of information and cybersecurity and to follow new trends and threats.
Ability to communicate technical information clearly to non-technical colleagues or clients.
Resilience to stress, ability to work under pressure and maintain perspective when handling security incidents.