SOC Engineer_Pratima

SOC Engineer

• Monitoring and analysis of cyber security events using Microsoft Defender and Sentinel SIEM.
• Monitor internal and external threats, examine logs, events, and alerts generated by multiple platforms for anomalous activity.
• Development and execution of SOC and standard operating procedures SOP
• Triage security events and incidents, detect anomalies, and report/direct remediation actions.
• Timely escalate security incidents whenever SLA's are not met.
• Assist in incident detection and resolving incidents by following all phases of incident management lifecycle.
• Integrate and collaborate threat information to improve incident detection capabilities.
• Should be capable of report generation from security solutions and preparation of report for management or leadership review.
• Collect evidence of security incidents, and other error conditions that may constitute a breach in security or a degradation of integrity or confidentiality of systems and data.
• Ability to coordinate and work with stakeholders to track security incidents till closure.
  
  Requirements

• Bachelor Degree in Information Technology
• At least 4 years of experience required in security incident response or in security operations center (SOC)
• Willing to work in shifts - 24/7 schedule
• Experience in security device management and multiple SIEM platforms
• In-depth knowledge of security concepts such as cyber-attacks and techniques, threat vectors, risk management, incident management, etc.
• Strong working knowledge of security-relevant data, including network protocols, ports and common services, such as TCP/IP network protocols and application layer protocols (e.g. HTTP/S, DNS, FTP, SMTP, Active Directory etc.)
• Ability to communicate technical details effectively in writing and verbally to IT personnel and management.
• Knowledge of security best practices and concepts.
• Knowledge of Windows and/or Unix-based systems/architectures and related security.
• Having Azure , CEH and security analysts certifications will be an additional advantage.