Lead - SOC Technology

Summary:

• Lead SOC technologies and Management, shall be responsible for ensuring the day-to-day operations and maintenance of the organization's security.
• Strengthen security posture and ensure the control effectiveness of security systems within an organization.
• Collaborate with diverse teams to ensure the seamless functioning of the Solutions, optimization of the security infrastructure and controls.

Responsibilities:

• Ensure the day-to-day operations and maintenance of the organization's cyber security infrastructure and controls to protect systems, networks, and data.
• Ensure coverage and effectiveness of security operations and deployed solutions.
• Ensure optimum security, availability, performance, and capacity of security solutions under management.
• Configuration, Monitoring & Troubleshooting of SIEM, SOAR, UEBA, NBAD, Threat Intel, Deception etc.
• Responsible for Firmware upgrades, closing of Audit points/Vulnerabilities, Creation of Security Policies, Fine tuning of exiting Policies, Configuration Backups, Event Log Monitoring, Threat Intel integration, Signature finetuning etc.
• Ensure & maintain up-to-date documentation - SOPs, Architecture digrams etc. to remove dependency on people.
• Manage configuration changes and deployments according to established change management processes, ensuring minimal disruption and adherence to best practices.
• Ensure hardening, latest stable version and security patches of security devices and solutions
• Track EOL/EOS and ensure that there no technology obsolescence.
• Ensure resolution of incidents and outages, coordinating with internal teams and external vendors to restore service within agreed-upon SLAs.
• Handle escalations and run the smooth operations of security solutions.
• Identify & analyse pain areas in existing security operations & implement improvements
• Handle operational issues which require design/technical inputs.
• Ensure compliance with regulatory requirements, security policies, and security frameworks such as ISO 27001, NIST, or CIS
• Publish the relevant dashboards and status updates.
• Escalate deviations and violations in a timely manner.
• Remain current with organizations security policies, latest security advisories/threats, industry best practices and developments in cyber security, and recommend and implement best practices and technologies to mitigate emerging threats.

Education: B.E/ B.Tech, MCA (Computer/IT)/B.Sc (Computer/IT) or degree in relevant field.

Experience: Candidate should have 8+ years of experience preferably in Banking and Technology organization

Knowledge:

• Sound experience in managing SOC technologies and operations in a large and complex environment.
• Should have sound understanding & knowledge of various SOC technologies & techniques like SIEM, SOAR, UEBA, NBAD, Threat Intel, Deception etc.
• Should have hands on experience on SOC platform administration, LOG Source integration, Playbook, Usecase engineering, incident response techniques and technologies. Finetune, configuring and thresholds for SIEM and vulnerability tools.
• Should have knowledge & understanding of IT infrastructure & networking technologies, operations and security principles. Ability to analyze endpoint, network, and application logs. Knowledge of various security methodologies and technical security solutions.
• Should prepare and implement the use cases for SOC monitoring team able to provide proactive threat hunting to detect incidents.
• Should have sound understanding about Threat Hunting, Mitigation and Response.
• Strong understanding of Regulatory security guidelines & master directions and security frameworks such as ISO 27001, NIST, or CIS.
• Should be well versed with ITIL and ITSM practices.

Skills:

• Exceptional analytical, conceptual thinking, Troubleshooting and problem-solving skills.
• Strong leadership, negotiation, and conflict resolution skills.
• Detail-oriented with a focus on quality and accuracy in project/service deliverables
• Should have strong written, verbal and presentation skills.
• Ability to perform under pressure, influence stakeholders and work closely with them to determine acceptable solutions.