Job Description
Position: SecOps Engineer
Reports to: SOC Lead
Department: Information Security
Status: Exempt
Location: TBD
POSITION SUMMARY:
The SecOps Engineer will fit into a global Security Operations team helping the organization to become the SME in the tools that are being utilized by the Security Operation Center to monitor the company network and helping the organization by enhancing the preventive, detective and mitigating security controls through management and proper configuration of tools.
POSITION RESPONSIBILITIES:
- Manage any in scope solution projects (integration/ implementations).
- Responsible for meeting audit and compliance requirements.
- Demonstrate ability to manage and motivate multiple project teams in multiple geo-locations
- Work with different internal and external teams providing subject matter expert (SME) to support the continual availability and improvement of cyber defense systems
- Work in conjunction with other cyber security specialist and engineers to support, maintain, troubleshoot, and tune security devices
- Deep configuration and administration of one or more cyber security tools such as log management, IPS/IDS, Firewalls, Cloud Security tools among others
- Support investigations into security related incidents
- Support internal/external audit requirements from tooling perspective
- Administrate/configure tools according to security best practices of the industry
- Automation of tools and scripting
Educational Requirements:
- Bachelor s degree or equivalent working experience
- Desired Certifications:
- Cisco CCNA Security or Cyber Ops
- EC Council (CEH or Incident Handler)
- GIAC related certifications
- Cloud Security
Required Skills and Abilities:
- 4+ years previous working experience in a SOC or Cyber Security
- Knowledge of various operating systems and security devices
- Strong, verbal, and written communication, facilitation, and interpersonal skills
- Required Experience in administrating or monitoring detection/security tools:
- SIEM
- EDR
- Endpoint Protection
- IPS/IDS
- DLP
- Cloud Security (GCP. AWS, Azure)
- Identity and Access Management
- Firewalls and Networking
- Core understanding of possible attacks activities such as network probing/scanning, DDOS, etc.
- Good understanding of vulnerability assessment tools
- Good networking understanding
- English proficiency (written and oral)
- Ability to complete tasks and deliver on time, and good interaction with other teams
- Self-Motivated, curious, and knowledgeable pertaining to news and current information security trends and news
- Desired hands-on experience on:
- McAfee SIEM/Nitro
- Sumo Logic
- Cisco (ASA, Firepower, IDS,e etc.)
- Tanium
- Crowdstrike or any other EDR
- Palo Alto
- Cloud Computing such as AWS, GCP or Azure
- Proofpoint
Supervisory Responsibility: NA
Travel Requirements: NA
Work Conditions: General office environment; Remote will be considered.
The preceding description and functions is a summary of principal responsibilities, and may not be comprehensive in scope regarding work performed by an employee assigned to this position classification. Management reserves the right to add, modify, change or rescind the work assignments of this position. Management also reserves the right to make reasonable accommodations so that a qualified employee(s) can perform the essential functions of the position.
Does your profile matches to above Job description and looks exciting Then look no further and share your resume to Ar*****s@***.ai
,
Employement Category:
Employement Type: Full time
Industry: IT - Software
Role Category: General / Other Software
Functional Area: Not Applicable
Role/Responsibilies: L1/L2 SOC Monitoring Analyst
Contact Details:
Company: 24 7 Customer
Location(s): Bengaluru