Job Details

Overview

Bachelors degree with 5+ years of technical experience working in a SOC and cyber security incident response environment In-depth understanding of security threats (preferably OWASP Top 10 vulnerabilities), threat attack methods and the current threat environment Understanding of common attacks (e.g. brute force, SYN flood, session hijack etc.) Understanding of network protocols (TCP/IP stack, SSL/TLS, IPSEC, SMTP/IMAP, FTP, HTTP etc.) Stealth Watch Alerts, Tuning & Updating Rule set Microsoft Defender Advance Threat Protection (Defender ATP) FortiGate Analyzer - Alerts, Tuning & Updating Content Filter Rule set for Web surfing/Reports Windows Event Logs Base-line for Windows clients Server Logs with Syslogs from servers ISE Alerts & working with quarantine Laptops Symantec Alerts & Reports (TCS & workstation Support Team) InfoBlox for IPAM and DNS Knowledge on vulnerability scanning software: Nessus, NMAP etc.

Skills

• BE/BTech IT or CS or MCA

Job Description

• Provide Monitoring and Analysis support of computer security events Understand and Detect Cyber Security Events Perform initial triage Raise Incident and perform mitigation with the help of asset owners. Report computer security events, in accordance with established processes and procedures Be able to work with the vendors on the different IT Security Tools in place Be able to update rules and profiles within the IT Security Tools Be able to work with end users to fix Security issues with end points, applications and Servers Track Security issues and follow up until completed Possess good verbal and written communication skills