Description

Monitor and manage security events within a 24x7 Security Operations Center (SOC). Detect anomalies, prevent breaches, and respond to device alerts using standard service measures.

This role is on-site.

Responsibilities

• Monitor SIEM and security tools to detect anomalies and prevent internal or external breaches.
• Respond to device alerts via proactive systems and manage incidents using standard service measures.
• Develop basic SIEM event filters and assist in rule development to increase detection efficiency.
• Provide vulnerability assessment analysis based on scanning technology output.
• Research and document technical information to support the escalation of complex security issues.

Required Skills

• 4+ years of experience in a security analyst or administrator role within a complex environment.
• Extensive knowledge of TCP/IP, networking technologies, and network topology.
• Experience with security analysis tools such as ArcSight, LogRhythm, or QRadar.
• Hands-on experience with Checkpoint, F5, or Bluecoat technologies.
• Proficiency in using packet captures and tcp dumps for troubleshooting.
• In-depth knowledge of current Internet security attacks and prevention methods.
• Experience managing or configuring SIEM, IPS/IDS, and VPN technologies.
• Strong understanding of Windows and Unix security issues.

Preferred Skills

• Familiarity with McAfee, Juniper, and Citrix servers.
• Knowledge of ITSM and ticketing systems.

Key Skills

Education

Any Graduate