Description

You will act as a mid-level member of a 24x7 Security Operations Center (SOC) team to monitor, manage, and report on security and infrastructure events.

Responsibilities

• Monitor SIEM and security monitoring tools to detect anomalies and prevent internal or external breaches.
• Respond to device alerts via proactive alerting systems and manage incidents based on standard service measures.
• Develop basic SIEM event filters and assist in rule development to increase detection efficiency.
• Research and document technical information to support the escalation of complex security issues.
• Provide vulnerability assessment analysis based on scanning technology output.

Required Skills

• 4+ years of experience in a security analyst or administrator role within a complex environment.
• Extensive knowledge of TCP/IP, networking technologies, and network topology.
• Experience with security analysis tools such as ArcSight, LogRythm, or QRadar.
• Hands-on experience with Checkpoint, F5, or Bluecoat technologies.
• Proficiency in using packet captures and tcp dumps for troubleshooting.
• In-depth knowledge of current Internet security attacks and prevention methods.
• Experience managing or configuring SIEM, IPS/IDS, and VPN technologies.
• Technical certification in at least one security or network product set.
• Strong understanding of Windows and Unix security issues.

Preferred Skills

• Familiarity with McAfee, Juniper, and Citrix servers.
• Knowledge of ITSM and ticketing systems.

Key Skills

Education

Any Graduate