Job responsibilities :
Mentor security analysts regarding risk management, information security controls, incident analysis, incident response, SIEM monitoring, and other operational tasks (tools, techniques, Procedures) in support of technologies managed by the Security Operations Center.
Monitor the health of security sensors and SIEM infrastructure. Coordinate with IT teams on escalations, tracking, performance issues and outages.
Provide recommendations in tuning and optimization of security systems, SOC security process, procedures and policies. Define, create and maintain SIEM correlation rules, customer build documents, security process and procedures.
Staying up-to-date with emerging security threats
Qualification & Experience :
BE with 4-7 years experience in
Security operations
Anti-Malware tools Security
Incident Handling
IT support experience
SIEM Experience IBM QRadar (preferable),
LogRhythm, Splunk
Scripting / Coding – Python
• Shift leader experience
• Collaborative and team focused
• Ability to prioritize tasks
• Ability to work independently and in a team environment
Intrusion Detection / Protection System
Preferred Licences or certifications – CISSP, Security+, GSEC
Source link