Manager - Customer Security Operations

About The Company

• Responsible for managing customer queries related to all services and solutions delivered, including diagnosing, and resolving complex technical issues in Cloud & Security domain. The role acts as a conduit between customers and other teams such as engineering, architecture etc. for any issue resolution. This is an operational role, responsible for delivering results that have a direct impact on day-to-day operations and capable of instructing professional or technical staff and reviewing the quality of the work undertaken by these roles.
  

Responsibilities

• Anomaly detection: Identify patterns in data that deviate from normal, which could indicate threats
• Endpoint detection: Use tools to monitor and analyze data from endpoints to detect malicious activity
• Threat investigation: Use technologies to review logs and investigate anomalies
• Security posture: Identify weaknesses in detection rules, platforms, and data collection
• Incident response: Improve incident response by identifying and responding to threats
• Security strategy: Provide insights and feedback to help improve an organization's security strategy
  

Other Activities:-

• Enhancements to SIEM security process, procedures, and policies
• Integrate log sources in SIEM
• Configure Rules Reports and Dashboards
• Configure Playbooks and automation scripts
• Patch Management of platforms and ensuring corporate data and technology platform components are safeguarded from known threats.
• Document and maintain customer build documents, security procedures and processes.
• Assign responsibilities and duties as a security management representative.
• Planning and execution of projects.
• Manage and track progress of projects.
• Guide on SIEM operations.
• 24x7 on call support.
• Extended support to resolve the critical issues.
• Problem management.
• Incident and Change management.
  

• Excellent investigative skills
• Strong problem-solving and troubleshooting skills
• Knowledge of hacker culture & thinking
• Experience with computer forensics, vulnerability analysis, and penetration testing
• Skilled in report writing and educating others about threats and risks
• Strong knowledge on Firewalls, DNS, DHCP, Proxy, End point security configuration and management.
• Knowledge on multiple SIEM tools.
• Should be hand on for automation scripts, Regex and Parser building and playbook development
• Excellent knowledge on interoperability of various networking components and security components
• Knowledge on logs or packets captures.
• Knowledge on multiple Operation systems (Windows, Linux, Solaris etc.,).
• Should be having sufficient knowledge on LR equivalent SIEM technology & ITSM Remedy solutions.