SOC Admin

Job Description:

• Managing the infra team and ensure onboarding of new devices on premises and cloud
• Troubleshooting of devices which are not sending logs
• Regular finetuning and Optimal use of existing infrastructure
• Health check monitoring of infra components
• Proactive capacity planning
• Escalation to customer for non-responsive devices
• Open Tickets Monitoring and responsible for reduction in closure time
• Coordinate with team for development of parsers on time
• Ensure functioning of DR and 100% availability of DR
• Prepare ISO27001 policies and procedures and follow the same
• Ensure high availability and backup of all SOC infrastructure components
• Ensure all SOC infrastructure components are updated with latest patches and firmware

Core Competencies:

• Excellent knowledge and hand’s on experience as admin on any SIEM or XDR tool
• Knowledge in SIEM monitoring and incident reporting will be an added advantage
• Knowledge on SOAR technology will be preferred
• Knowledge of Cyber security, different types of attacks and vulnerabilities
• Experience on VMWARE, AWS, Azure will be preferred
• Keen to learn the security technologies and how security operates
• Reliability and overall good communication skills
• Well-developed logical thinking capabilities, in order to be able to investigate cases
• Able to work in shift schedule
• Excellent written and spoken English

Preferred Certifications / Trainings (not mandatory):

• Certified Ethical Hacker (CEH),
• CCNA, CCNP, AWS, AZURE, VMWARE
• Knowledge/Experience of SIEM, Networking, Compliance standard like ISO27001
• Other security certifications will be considered an asset
• Knowledge of Operating systems like Microsoft Windows, Linux
• Knowledge of applications like Oracle, MS SQL, etc.
• Knowledge of cloud technologies / Information security products
• Should have managed team of 10+ members
• Must be able to multi-task and work in a fast-paced environment.
• Proficiency with Microsoft Word, Excel and Access.