About the role
Qualification: B.E./B.Tech/MCA
Certification – CEH, ECIH, CISSP, CISM, GCIH, GCFA, Certified Threat Hunter, SIEM certifications for platforms like (Qradar, LogRhythm etc)
Work experience: 8-12 + Years
Location - Anhderi, Mumbai
Budget : 20 LPA
Responsibilities:
- Escalate validated and confirmed incidents to designated SOC Lead/ Incidents response team.
- Security Event Correlation as received from L2 SOC or Incident Response staff or relevant sources to determine increased risk to the business.
- Indepth knowledge on multiple SIEM platforms like Securonix, IBM QRadar, LogRhythm, Arcsight, FortiSIEM , Microsoft Sentinel, and others
- Support the SOC Manager in his duties (e.g. extension of SOC services)
- Update Security Operations reporting
- Triage security events and incidents, detect anomalies, and report/direct remediation actions.
- Development and execution of SOC procedures
- Should have indepth knowledge of Firewall, EDR, IDS/ IPS, VPN, Cloud Security
- Should have hands on Experience in Threat Hunting.
- Should have good hands-on experience in VAPT.
- Should have good knowledge in integrating TI feeds and Third-Party tools.
- Should have knowledge in Building SIEM platform with SOAR, NBAD, UEBA Integration.
- Should have hands on experience in developing Use case and Parser Creation.
- Should have knowledge in Breach simulation attack.
- Sound knowledge in Unix, Linux, Windows, and security devices like firewall, etc.
- Preparation of RCA, Preparation of runbook and Training to L2 and L1 team.
- Qualify alerts as security incidents and get the incident process started
- Manage end to end security incidents working with the customer Infrastructure/ application team
- Participate in "hunt missions" using threat intelligence, analysis of anomalous log data and results of brainstorming sessions to detect and eradicate threat actors on networks.
- Provide forensic analysis of network packet captures, DNS, proxy, NetFlow, malware, host-based security and application logs, as well as logs from various types of security sensors.
- Audit historical alerts and the analysis performed by L1 and L2 engineers
- Preform advance log analytics and build reports, dashboards, correlation rules
- Track SLA compliance