Principal Consultant

4 - 9 years

30 - 35 Lacs

Posted:1 day ago| Platform: Naukri logo

Apply

Work Mode

Work from Office

Job Type

Full Time

Job Description

  • Participate and advance the Security Monitoring and Incident Response capability operating out of India.
  • Be part of Global Security Operations Center (SOC). Ensure seamless delivery of monitoring service timely response on the incidents.
  • Conduct Cyber Incident Response Team (CIRT) activities, including forensic analysis.
  • Develop and implement operational processes and standards for security incident response and operational security tasks.
  • Collaborate with the other security teams to identify, investigate, and respond to major incidents.
  • Ensure that the incident response processes are kept up-to date and we'll-rehearsed during any real cyber-attacks or cyber drill.
  • Support Engineering efforts such as platform management upgrades and changes and tool integration.
  • Support other security operations functions as directed including development and testing of automation.
  • Report and optimize key Security Operations metrics.
  • Oversee emerging cyber threats, proactive modelling, threat validation.

What would your day look like

  • Lead the SOC team and adhere to service delivery and ensure zero misses on SLA
  • Create and maintain SOC Playbooks, SOPs, and Training materials, manage shifts, onboarding, and training for SOC Engineers.
  • Perform all tasks required per shift including reporting, monitoring, and turnover logs.
  • Perform security log analysis during Information Security related events, identifying and reporting possible security breaches, incidents, and violations of security policies.
  • Process alerts, identify, investigate, and respond to security incidents adhering to Service Level Agreement (SLA). Utilize ticketing system and standard operating procedures effectively.
  • Escalate critical incidents that require management attention in a timely manner and provide timely updates.
  • Participate and create detailed incident reports. Contribute to lessons learned in collaboration with the appropriate team.

Who are we looking for

  • 4-year University (bachelors) degree in Computer Science, Information Technology, or STEM fields, or equivalent experience.
  • 10+ years of relevant post-qualification experience, with at least three (3) years in leading Security Operations Center (SOC) environment
  • Hands on experience and knowledge to monitoring tools like LogRhythm, DataDog, Sentinel, Splunk, ArcSight, QRadar etc
  • Preferred experience in SOAR (Security Orchestration Automation Response) platform.
  • Experience with Scripting or programming (Shell scripting, Power Shell, Python, KQL etc )
  • Working experience or knowledge of security monitoring in Cloud environment (Azure, Google Cloud, etc ).
  • Knowledge of threat centric frameworks - Cyber Kill Chain, MITRE ATTCK and NIST Cyber Security Framework.
  • Experience with writing/creation of formal documentation such as reports, slide decks, and architecture diagrams
  • SANS GCIH / GCFA certification is mandatory
  • Technical skills in security operations, monitoring and event analysis, incident response and reporting

Mock Interview

Practice Video Interview with JobPe AI

Start Job-Specific Interview
cta

Start Your Job Search Today

Browse through a variety of job opportunities tailored to your skills and preferences. Filter by location, experience, salary, and more to find your perfect fit.

Job Application AI Bot

Job Application AI Bot

Apply to 20+ Portals in one click

Download Now

Download the Mobile App

Instantly access job listings, apply easily, and track applications.

coding practice

Enhance Your Skills

Practice coding challenges to boost your skills

Start Practicing Now
Providence Global Center logo
Providence Global Center

Business Services, Technology

Seattle

RecommendedJobs for You

pune, maharashtra, india