Qualifications

•     BE/ B.Tech/ M.Tech/ MCA with 60%+ throughout the academics.

•     Security certifications like CEH or equivalent preferred.

Experience and Skillset

•     Minimum 2 +years hands-on experience with one or more SIEM tools (Log Logic, LogRhythm, Splunk, QRadar, ArcSight etc.).

•     In-depth understanding of security threats (preferably OWASP Top 10 vulnerabilities), threat attack methods and the current threat environment.

•     Proficient in Incident Management and Response.

•     Basic knowledge of Windows and Unix environments.

•     Knowledge of OSI Model, TCP/IP Protocols, network security.

•     Knowledge about other security tools like – Packet Analyzers, HIPS/NIPS, Network Monitoring tools, Cloud Security, AV, EDR, WAF etc.

Responsibilities

•     Responsible for working in a 24x7 Security Operation center (SOC) environment.

•     Carry out investigation and correlation and work with the stakeholders towards mitigation and closure of security incidents.

•     Monitor various dash boards from different security solutions on shift basis.

•     Work with the engineering team for Sensor and SIEM rules fine-tuning.

•     Prepare various management reports from SIEM and other security solutions.

•     Provide analysis and trending of security log data from a large number of heterogeneous security devices.

•     Provide threat and vulnerability analysis as well as security advisory services.

•     Analyze and respond to previously undisclosed software and hardware vulnerabilities.

•     Investigate, document, and report on information security issues and emerging trends.

•     Seamlessly integrate with the team work culture, ensure proper information flow across shifts, prepare/take part in shift handovers.

•     Communicate effectively by contributing significantly to the development and delivery of a variety of written and visual documents for diverse audiences.

Location

Navi Mumbai (On-Site)