SOC L2 (Cyber Security)

Role & responsibilities

Responsible for handling escalation in 24*7 environment.

1) Hands On Experience on working as level 2 SIEM Admin on multiple SIEMs(ArcSight)

2) Hands On Experience with working on different layers of protection(Network/ EndPoint/ Content/ Web Security) devices of the infrastructure

3) Understanding of Risk Management Frameworks

4) Monitoring Compliance with Information Security Policies and Procedures

5) Mentoring and coaching

6) Maintain a broad and current understanding of evolving threats and vulnerabilities to ensure the maintenance of the security of our client networks

7) Escalation Handling

8) Threat hunting on the collected events from the clients

9) Team Player

10) ProActive action on Zero Day Attacks

11) Must have good communication skill

12) Must have ability to work independently towards success

Preferred candidate profile

1) Creating, Modifying, and Updating Security Information Event Management (SIEM), EDR, XDR, Threat Hunting, VAPT, SOAR

2) Network, Infrastructure including security segment

3) Cyber threats & Vulnerabilities, authentication, authorization & access control methods

4) Any programming knowledge or scripting knowledge will consider as added advantage

5) Experience in analysing malware

6) Maintaining Security Records of Monitoring and Incident Response Activities

7) Performing Security Analyses

8) Performing Threat Analyses

9) Client request handling

10) Excellent communication skills (English & Hindi)