Job Summary

Handling critical incidents/escalations, reviewing incidents and tracking towards closure • Good experience in SIEM tools, event logging and event analysis • Good knowledge in enterprise security products like Firewalls, EDR, IPS, Web/content Filtering tools, Compliance tools • Team Management, performance monitoring and prepare reports on weekly, monthly basis and share to stakeholders as needed • Good knowledge about common security attacks, targeted attacks • Good experience in forensic analysis, Packet Analysis tools like Wireshark, TCP Dump etc • Good knowledge in Enterprise Security architecture • Knowledge on compliance requirements and audits • Assisting, mentoring L2 analysts and groom them to move to next level • Contribute to continue monitoring and improvement of security posture of the organization • Having experience of managing team of 25+ team members across multiple locations.

Key Responsibilities

1. To Create All Quality Documents| Collect Metrics Data And Conducting Audits. To Perform Value Creation And Km Activities
2. To Contribute Individually On Technical Aspects As An Sme.
3. To Coordinate With Team And Business Users.
4. To Ensure Process Improvement And Compliance, Participate In Technical Design Discussion, Review Technical Documents And To Provide Support On Issues.
5. To Gather Users/Business Requirements And Create Project Plans And Keep Track Of Schedule For On Time Delivery As Per The Defined Quality Standards
6. To Raise Risks| Issues And Escalation To Senior Management And Customer.

Skill Requirements

Experience in Leading and managing Global Security Operations Center • Proficient in Incident Management and Response • Experience in security device management and SIEM (RSA / Splunk) • In-depth knowledge of security concepts such as cyber attacks and techniques, threat vectors, risk management, incident management etc. • Experience in threat management • Knowledge of Operating Systems, applications, databases, middleware to address security threats against the same. • Proficient in preparation of reports, dashboards and documentation • Excellent communication and leadership skills • Experience in performing vendor management • Good Analytical skills, Problem solving and Interpersonal skills • Ability to handle high pressure situations with key stakeholders • Experience in Threat Intelligence and deception. • Tools/Technologies - SIEM tools, SOC, Security Incident Management, Threat Intel, Malware analysis, Firewalls, IPS, Web/content Filtering tools, AV, APT Tools, Wireshark, TCP Dump, Encase/Any other Forensic tool kit

Other Requirements