Security Delivery Practitioner

Project Role :Security Delivery Practitioner




Project Role Description :Assist in defining requirements, designing and building security components, and testing efforts.


Must have skills :Security Information and Event Management (SIEM)



Good to have skills :NA
Minimum



12 year(s) of experience is required



Educational Qualification :15 years full time education


Summary:The SOC Lead is responsible for managing the Security Operations Centre SOC Preferably Sentinel SIEM Solution team, ensuring the effective monitoring, detection, and response to security incidents. This role requires a blend of technical expertise, managerial skills, and crisis management capabilities to protect the organization's information assets and maintain a robust security posture.
Roles & Responsibilities:

Act as an incident commander and correlate incidents IT / OT to provide investigation direction to L2 SOC.

Manage critical/high severity and sophisticated cyber incidents.

Ensure quality and speed of incident response by L1 L2 SOC.

Develop and execute service improvement plans.

Present SOC service performance to Customer SOC and GRC Manager Monthly.

Provide inputs to the Customer security engineering manager on issues, new development, testing, and implementation for:

SOAR Playbooks

Security analytics detection use cases

Contribute to further development, maintenance, and standardization of SOC processes, policies, and procedures.

Join cross-partner council meetings to highlight resolution delays by incumbent partners.

Participate in breach and attack simulation exercises and drive remediation.

Define paths for professional advancement (technical and soft skills

Execute all the responsibilities on a 24/7 basis.

Expected to be an SME in Security Information and Event Management SIEM

Collaborate and manage the team to perform effectively

Responsible for team decisions and ensuring adherence to security standards

Engage with multiple teams and contribute to key security decisions

Expected to provide solutions to security problems that apply across multiple teams

Conduct security assessments and vulnerability testing

Develop and implement security policies and procedures

Provide guidance and support to junior team members
Professional & Technical Skills:

Oversee the continuous monitoring of security events and alerts.

Lead the investigation and response to security incidents, including root cause analysis and remediation.

Develop and maintain incident response playbooks and procedures.

Threat Intelligence and Analysis:

Analyze threat intelligence to identify potential security threats and vulnerabilities.

Implement threat hunting activities to proactively identify and mitigate risks.:

Manage and optimize security tools and technologies, such as SIEM, IDS/IPS, firewalls, and endpoint protection.

Ensure the proper configuration and tuning of security tools to enhance detection and response capabilities.

Oversee vulnerability assessments and penetration testing activities.

Coordinate with IT and development teams to remediate identified vulnerabilities.

Lead and mentor the SOC team, providing guidance and support to enhance their skills and performance.

Conduct regular performance reviews and provide feedback to team members.

Foster a collaborative and positive team environment.

Develop and implement SOC policies, procedures, and standards.

Ensure the SOC operates efficiently and effectively, meeting established SLAs and KPIs.

Manage the SOC budget and resources, including staffing, tools, and training.

Collaborate with other departments, such as IT, legal, and compliance, to ensure a coordinated approach to security.

Communicate security incidents and risks to senior management and stakeholders.

Prepare and present regular reports on SOC activities and performance.

Lead the response to major security incidents, coordinating with internal and external stakeholders.

Develop and execute incident response plans, ensuring timely and effective resolution.

Conduct post-incident reviews and implement lessons learned to improve future response efforts.

Ensure the SOC is prepared to handle security incidents that impact business operations.

Collaborate with the business continuity team to develop and test disaster recovery plans.

Maintain up-to-date knowledge of industry best practices and emerging threats.

Identify and assess security risks, developing strategies to mitigate them.

Ensure compliance with relevant regulations and standards, such as GDPR, HIPAA, and ISO 27001.

Conduct regular risk assessments and security audits.

Relevant certifications, such as CISSP, CISM, CEH, or GIAC.

Proficiency in Security Information and Event Management SIEM

Experience with security incident response and threat intelligence

Strong understanding of network security principles and technologies

Knowledge of security frameworks and standards e.g., ISO 27001, NIST

Experience with security tools and technologies e.g., SIEM, IDS/IPS

Experience with cloud security and DevSecOps practices

Familiarity with regulatory compliance requirements e.g., GDPR, HIPAA

Experience with security risk assessment and management

Knowledge of regulatory requirements and industry standards.

Familiarity with advanced threat detection and response techniques.
Additional Information:

Bachelor's degree in computer science, Information Security, or a related field

A 15 years' full-time education is required.


Qualifications

15 years full time education