Job Description: Overview:The CompuCom SOC provides managed security services for Global clients and manages their security operations. The team is responsible for 24X7 telephone and remote support, specialized support for security compliance users, and works with the CompuCom clients on security issues. This role will act as a mentor for the team s junior members and a center of knowledge, leveraging upon the years of experienced gained in this field deploying and supporting Firewalls, IDS/IPS, Content Filters, and SIEM tools.Responsibilities:Meet service level agreements (SLA s) regarding response time and customer notificationsProficiency in Cisco ASA, FMC/FTD, experience is mandatory including projects implementation, migration on Cisco security suite including AMP, Umbrella, ISE and IronPort.CISCO ISE/FTD/FMC Change administration, writing and implementing client sponsored or required changesAssist with and define, both team and service key performance indicators (KPI s)Work with clients and tools vendors to address all security related issuesCoordinate security investigations based on internal processes and proceduresAssist customers or facilitate the implementation of protective and mitigating security controls as requiredPerform manage, add, change, delete operations within the security toolsHandles the fulfillment of all security requests and calls from the userDrives resolution as it relates to customer facing incidents and change managementProvides central contact point for implementation, architecture and problem management for managed security applications (Firewall, IDS, Encryption, SIEM, EIQ, Web filtering)Scan system devices for vulnerabilities according to compliance policies - NessusInitiate security incident response including tracking and recovery actionsAnalyze and validate the network and hosts based on Intrusion Detection System eventsService and Change management knowledge and understanding a mustRecommends changes or policies to increase department effectiveness and customer satisfactionMonitors SLAs for responsiveness and coverage. Provide regular reports and statistics for service line managementParticipate in an on-call rotationProvide oversight and guidance to junior team members as it relates to the Security realmDocument and create process improvements as needed when gaps are/have been identifiedParticipate in an on-call rotation to provide emergency support.
Qualifications
:Knowledge and Skill Required:8-10 years of experience actively deploying and managing security and networking devicesExperience in managing Customer Service and client expectationsAbility to complete swift problem resolution, including troubleshootingAnalytical approach for solving tasks as well as Ability to repeat proceduresFamiliarity with existing knowledge base to scan for possible solutions to problemsAbility to multi-task with different types of problemsSolid written verbal communicationKnowledge of security tools like firewalls, IDS s, Web content filtering and content filtering solution. E.g. Cisco, Checkpoint, FortiGate, Snort , EIQ Securevue, ArcSightKnowledge of Cloud providers like Azure, AWS and GCPKnowledge of compliance standards such as NIST HIPAA, PCI, SOX, Etc Knowledge of Microsoft Office Suite productsAbility to coordinate resources to resolve problemsDemonstrated high level of Technical Support experience and knowledge required for all services provided by the Security Operations CenterStrong analytical skills balanced with effective communication and excellent customer service skillsExcellent and demonstrated knowledge of IT processes and procedures, specifically Incident, Problem, Change and Service Level ManagementAt least two (2) industry certification. CCIE Security, CCNP Sec , CCSA, PCNSE, NSE4, Azure Security Associate etc.Detailed knowledge and extensive experience working and troubleshooting TCP/IP, MPLS, BGP, OSPF, EIGRP, IS-IS, VXLAN, QoS, AAA, TACACS Qualifications: Interpersonal Savvy",