Lead - SOC Engineer

Candidate to have at least 7+ years experience in constantly Monitoring security systems such as intrusion detection/prevention systems (IDS/IPS), firewalls, endpoint detection and response (EDR) systems, and security information and event management (SIEM) platforms to detect potential security incidents.

Should have exposure in identifying and investigating security incidents and breaches by analyzing logs, network traffic, and other relevant data sources. Should respond promptly to security incidents to contain the threat and mitigate its impact.

Should possess experience in analyzing threat intelligence feeds and security alerts to understand emerging threats and vulnerabilities that could affect the organization's security posture.

Should possess skills in Identifying and assessing vulnerabilities in the organization's systems and applications, prioritizing them based on risk, and coordinating with relevant teams to remediate or mitigate them.

Managing and maintaining security tools and technologies deployed within the SOC, ensuring they are properly configured, updated, and optimized to effectively detect and respond to security threats.

Documenting security incidents, investigations, and remediation efforts in detail for compliance purposes and to facilitate knowledge sharing and lessons learned.

Collaborating with other teams within the organization, such as IT, network operations, and legal, to coordinate incident response activities and ensure a cohesive approach to security.

Staying up-to-date with the latest security threats, trends, and best practices through training, certifications, and participation in industry forums and communities.

To foster collaboration with other IT and security teams, such as network operations, incident response, and vulnerability management.

Qualifications :

7+ years of experience, including 6+ years of relative experience (Related experience includes SOC, Incident response, etc.).

Prior experience in managing Security Operations Centers/Managed Security services.

Experience in tuning and/or configuring SIEM, Threat intel tools, and Endpoint Etc..

Knowledge of various operating system Flavors, Applications, Databases to address security threats against the same.

Hands on experience on GCP security features will be an added advantage

Good communication and interpersonal skills