SOC Admin L2

Mandatory Skills

• In Depth knowledge on Attack techniques and industry leading frameworks like MITRE and NIST
• Prior experience on log analysis in multiple technologies like Firewalls, DNS Security, Proxy, End point security to support the investigation and response process
• Incident Response and Resolution
• IT Service Management Process knowledge
• Good verbal and written skills
• SIEM technology

Qualification

• Education Qualification Any Graduation/Intermediate/ Diploma with minimum 60%.
• 5 to 7 years of experience out of which last 2 years should be in SOC operations as L2 SOC Admin on leading SIEM technology. LR experience will be preferred

Mandatory Experience

• Prior experience in complex SOC environment of a bank with SIEM EPS > 50000 and technologies like SOAR and UEBA integrated with the platform
• Log Analysis and Incident Response
• Packet analysis using open-source or commercial tools
• Threat Intelligence Brand monitoring, Deep and Dark Web Monitoring
• Should have actively supported Cyberdrills and regulatory audits