Job
Description
Splunk L3 SOC Lead U.S Shifts (Night Shift) Responsibilities: The primary responsibility is to identify, secure, and weed out the threats as front-line defence personnel. They are alert and aggressive to filter out suspicious activity and mitigate risks before any incident occur. When an incident occurs, SOC analysts are the first to counter the attacks and make required attempts to defend. Report cyber threats and then implement changes to protect an organization. Responsible for working in a 24x7 Security Operation centre (SOC) environment. Minimum of 7 years of experience in Cyber security At least 5 years of working in the SOC. Candidate must be ready for Night Shifts. Monitoring and analysis of cyber security events with the use of Splunk SIEM tool. Provide analysis and trending of security log data from many heterogeneous IT security devices. Provide threat and vulnerability analysis as well as security advisory services. Proficient in Incident Management and Response, handling escalations In-depth knowledge of security concepts such as cyber-attacks and techniques, threat vectors, risk management, incident management etc. Provide analysis and trending of security log data from a large number of heterogeneous securities devices. Provide threat and vulnerability analysis as well as security advisory services. Analyse and respond to previously undisclosed software and hardware vulnerabilities. Investigate, document, and report on information security issues and emerging trends. Guide and share information with other analysts and other teams. Other tasks and responsibilities as assigned. Knowledge of various operating system flavours including but not limited to Windows, Linux, Unix Knowledge of TCP/IP Protocols, network analysis, and network/security applications. Knowledge of common Internet protocols and applications Communicate effectively by contributing significantly to the development and delivery of a variety of written and visual documents for diverse audiences. Knowledge about various tools like - SIEM, SSL, Packet Analysis, HIPS/NIPS, Network Monitoring tools, Remedy, Service Now Ticketing Toolset Web Security, AV, UBEA, Advanced SOC Knowledge of ITIL disciplines such as Incident, Problem and Change Management. Qualifications we are looking for B. E/BTech/B.SC with minimum 7-10 +-year experience required in SOC preferably in Splunk tool. 5+ years experience in Splunk L3 Role Advanced knowledge of Linux operating system. . Candidate should be ready to do night Shifts. Experience in working in a global, process-driven organisation. Highly motivated individual with the ability to self-start, prioritise, and multi-task Candidate should be able to react quickly and decisively in high stress situations. Strong verbal/written communication and interpersonal skills. Ability to work independently on assigned tasks as well as delegate responsibilities to junior team members. Preferable Certification: CCSP/CEH/CISA/CISM/CISSP
