Job Seekers, Please send resumes to resumes@hireitpeople.com

Minimum years of experience*: 8

Certifications Needed: No

Responsibilities you would expect the Subcon to shoulder and execute*:

• Experience in Handling Tier1 to Tier3 SOC Teams.
• Experience in Handling 24X7 Environment.
• Managing Customer escalations, vendor management.
• Review all incident records regularly to ensure they were resolved within the parameters of the defined severity levels.
• Audit incident records that have exceeded standard resolution times
• Review of the SOC processes and procedures regularly and update the documents.
• Experience with Security Events Monitoring, Deep Investigations, Forensics, Threat Hunting, Malware Reverser etc.
• Experience in Implementing Next - Gen-Security Operations Center
• Experience in Operating and Maintaining a SOC
• Leadership skills to manage and motivate diverse, high performance teams.
• Knowledge of reporting capabilities of SIEM and Integrated Metrics Reporting
• Product Knowledge of SIEM tools like Qradar, ELK, Splunk, Arcsight, Logrhythm etc.
• Deploying the use cases in real time environment and monitoring, fine-tuning accordingly based on the analysis and customer requirement
• Creation of SOPs and knowledge base documents
• Reducing false positive alerts with proper analysis post customer approvals with helps to improve the performance of Logs Monitoring
• Preparation of Daily, weekly Monthly Reports with analysis and presenting the same to the customer in weekly call
• Weekly and monthly status reports to higher management
• Participate in business meetings with various stake holders
• Take corrective actions based on the customer satisfaction surveys
• Drive service improvement programs
• Effort estimation/ reviews on need basis for new projects

Job Requirements:

• Ideal Candidate should have at least 10-12 years' experience focused on the SOC Operations, design, SIEM Implementation, 24X7 team management
• Have worked with CIRT teams, experience in ATP, DDoS, Phishing, Malicious Payloads, Malware etc.
• Have deep understanding of advanced Security Analytics, Forensics, and Cybersecurity Frameworks, Critical Incident Response/ Breach Response etc.
• Broad Understanding of Security Domains including Network Security, Cloud Security SIEM, DLP, IDAM, App Sec. GRC etc
• Good teamwork, Willingness to learn and inspire the team
• Creativity, able to analyze and solve problems and able to work within pressure
• Able to work with multiple customers at a time
• Strong analytical skills and efficient problem solving
• Good English communication skills (written and oral)
• SIEM Product Certifications, SANS certification, CISSP
• Threat Modelling, Threat Hunting Kill Chain exercises
• Knowledge on Orchestration & Automation for Security technologies
• Ensuring SLAs are met
• Preparation of Daily, weekly Monthly Reports with analysis and presenting the same to the customer in weekly call

Interview Process (Is face to face required?) No