Cyber Security Specialist

Primary skills - Cybersecurity, SOC, SIEM tool, EDR, IDS/IPS

Exp - 6 to 12 years

Location - Pune (Hybrid)

NP - immediate joiners

Please find the below JD:

Cybersecurity Operations and Incident response is a technical leader who will manage both local and remote team members. This leader will employee their experience to manage daily security monitoring and investigation tasks as well as leading the response to security incidents.

Key Responsibilities:

• Review proposed change requests to rules or policies for firewalls, router access control lists, IPS, and proxies.
• Perform regular reviews or audits of deployed rulesets to identify drift from baseline.
• Perform real-time security monitoring for potential cybersecurity threats.
• Analyze alerts and coordinate responses with senior analysts.
• Perform triage of potential security incidents in accordance with the SOC case handling procedures, alert handling procedures, and customer-specific procedures.
• Perform continuous improvements on services by identifying and correcting problems and gaps in knowledge and document materials.

Experience and Educational Requirements:

• Knowledge network protocols (TCP/IP, LAN/WAN, Routing, HTTP, DNS, SMTP).
• Network, CCNA, SIEM, Security
• Working knowledge of network security technologies including:
• Firewalls
• Network IDS/IPS Solutions
• Network monitoring solutions
• Switch/Router ACLs
• Network Access Control solutions
• Web Application Firewalls
• Poxy Servers and Secure Web Gateway
• 5+ years Hands-on experience with SIEM, IDS/IPS, EDR, and other security technologies.
• Experience with Unix/Linux/Windows Operating Systems.
• Working knowledge of Shell/Bash/Python.
• Excellent written and verbal communication skills, with experience presenting technical information to both technical and non-technical audiences.
• 3+ years professional experience working with enterprise network solutions.
• CCNA, CCDA, CCNP, or Network+ certification required.