Deputy Manager

The role of a Deputy Manager in Cyber Security is to build and nurture positive working relationships with teams and clients to exceed client expectations.

This is an excellent opportunity for individuals who are passionate about security and want to make a real difference in the industry. With our team, you will be working on cutting-edge projects that shape the future of the region and beyond.

1. Work closely with security teams to understand their requirements and translate them into SIEM use cases.
2. Design, implement, and test SIEM use cases to detect specific types of security threats.
3. Continuously optimize use cases to improve detection accuracy and reduce false positives.
4. Develop and implement SIEM rules and correlation logic to detect security incidents.
5. Tune alerts to minimize false positives and ensure they are actionable.
6. Create and maintain parsers/connectors in SIEM and SOAR.
7. Set appropriate thresholds for alerts based on analysis and threat intelligence.
8. Ensure data is normalized and enriched for effective correlation and analysis.
9. Develop and maintain log parsing rules to accurately ingest and process data.
10. Maintain detailed documentation of SIEM use cases, including design, implementation, and tuning procedures.
11. Generate reports on the performance and effectiveness of SIEM use cases.
12. Collaborate with stakeholders, including SOC analysts, incident responders, and IT teams, to ensure use cases meet their needs.
13. Work closely with SIEM vendors to troubleshoot issues and implement new features.
14. Innovate and experiment with new use case ideas to enhance the SIEM's detection capabilities.
15. Design and develop automated workflows to address common security operations tasks and incidents.
16. Write and maintain scripts (e.g., Python, PowerShell) to support automation tasks.
17. Create and implement playbooks that automate the response to security incidents.
18. Develop use cases for automation based on common incident scenarios and threat patterns.
19. Automate the enrichment of security alerts with contextual information to improve decision-making.
20. Integrate various security tools (e.g., SIEM, EDR, ITSM (Service Now), firewalls, Threat intelligence platforms) with the SOAR platform.
21. Continuously optimize automated workflows to reduce false positives and enhance detection accuracy.

• Proficiency with proposed SOAR and SIEM solutions.
• Experience in configuring, managing, and optimizing SOAR and SIEM platforms.
• Strong skills in scripting languages (e.g., Python, PowerShell, JavaScript) for developing automation scripts.
• Experience in writing and maintaining scripts to automate security tasks and processes.
• Experience in utilizing RESTful APIs to enable communication between different security tools.
• Experience in converting MITRE TTPs to Misuse cases for better detection and response.
• 7 Years of experience and proposed OEM certifications.

This role offers a competitive salary and opportunities for growth and development within the company.

We provide a dynamic and supportive work environment where you can learn and grow as a professional.

This role is perfect for those who are passionate about security and want to make a real difference in the industry.

We offer a comprehensive benefits package, including health insurance, retirement plans, and paid time off.