Cyber Security Lead

Role & responsibilities.

• Experience in SIEM Tool like ArcSight, LogRhythm SIEM, Threat Intelligence, Malware Analysis, Incident Response -
• Experience in handling SOC customer in Captive Environment
• Team management experience more than 20+ team members, performance measurement experience.
• Experience in handling P1 incident, driving investigation till closure
• Responsible for the technical Administration or troubleshooting in SIEM ensuring the efficient functionality of the solution
• Responsible for Incident Validation, Incident Analysis, Solution Recommendation,
• Good knowledge on implementation, installation, integration troubleshooting and overall functionalities of LogRhythm/ArcSight/QRadar/Splunk
• Experience in creating content based on MITRE Framework
• Exposure to SOAR, alert aggregation, automation, Playbook creation
• Monthly/Quaterly Review with customer
• Maintains awareness of new and emerging cyber-attack threats with potential to harm company systems and networks. Devises and implements countermeasures to mitigate potential security threats.
• Assists with the development and maintenance of IT security measurement and reporting systems to aid in monitoring effectiveness of IT Security programs.
• Good Coordination skills with various other teams for faster resolution/completion.
• Good to have threat hunting knowledge.

Skills & Competencies

• BE/B.Tech or equivalent with minimum 6-9 years of experience
• Work experience of minimum 6 years in SOC Incident Handling, Incident Response Trend Analysis, administration/monitoring of SIEM Tool like ArcSight, LogRhythm SIEM, Threat Intelligence, Malware Analysis,
• Ability to adapt and follow the processes and guidelines
• Possess an impeccable work ethic and a high degree of integrity
• Good Analytical & Problem Solving skills
• Able to communicate with technical staff/management
• Flexible to work after office and over weekend if required
• Highly motivated & customer centric