SecOps Engineer

Job Description

Information Security Engineer will monitor computer networks for security issues and investigate security breaches and other cyber security incidents. Install security measures and operate software to protect systems and information infrastructure, including firewalls and data encryption programs. Work with security team to perform tests and uncover network vulnerabilities. Fix detected vulnerabilities to maintain a high-security standard. Document security breaches and assess the damage they cause, also manage & monitor Security devices.

Competencies:

• Follow ITIL practices regarding incident, problem and change.


• Providing guidance and support to technical teams on security standards and industry best practice


• Performing security operations and maintenance using security tools


• Manage and assist in performing on-going security monitoring of information systems including assessing information security risk through qualitative risk analysis on a regular basis


• Assessing the impact of emerging threats and managing teams to co-ordinate appropriate remedial actions


• Evaluating and recommending new information security technologies and counter-measures against threats to information or privacy


• Designing and implementing dashboards and data visualizations for various stakeholders and escalate problems to the respective authority when needed


• Ensuring that disaster recovery and emergency operating procedures are in place and tested on a regular basis - Conducting risk analysis to identify critical operations and systems that are core to continued business operations in the event of a disruption


• Applying professional judgment in complex situations and handle effectively multiple tasks, initiatives and priorities

Technical Skills:

• Good understanding of network services, vulnerabilities and attacks


• Internet security, networking protocols, and related technologies, including IDS/IPS, firewalls such as Cisco, PaloAlto, etc, content filtering, and packet inspection


• Hands on experience on Palo Alto (virtual, physical and management)


• Hands on experience on Cisco Firewalls


• Good understanding on Azure Cloud Security -or- AWS Cloud Security
  
  
  
  • Azure/AWS/OCI - Cloud Security logging and monitoring (Splunk)
  
  
  • Azure/AWS/OCI - Cloud Configuration and Compliance (Prisma Cloud, Prisma Compute)
  
  
  • Azure/AWS/OCI - Cloud Security Services (Network Security Group)
  
  
  • Good to have - Oracle Cloud Security
  
  
  
  


• Good understands OSI model


• Technical troubleshooting skills with emphasis in the security technologies: (Palo Alto / Cisco & (AWS or Azure))


• Support Application migration from on-prem data center into cloud infrastructure (AWS or Azure)


• Basic knowledge of any scripting languages or automation (Automation and/or orchestration of processes)


• OS Concepts Windows, Linux and Unix server platforms


• Endpoint Security and Compliance: Symantec Endpoint Protection, Tanium


• Understand networking/routing/switching and connectivity between clouds


• Understands encryption/decryption


• Understanding of Service First ticketing system


• Good understanding of security concepts, compliance, audit and benchmarks/frameworks


• Driving the development and ongoing tuning and optimization of security event monitoring and analysis application platforms


• Assisting in establishing and supporting enterprise policies, processes, and standard Service level agreement levels

Educational Qualification and Experience:

• Minimum of 15 years of formal education - Graduate / Post Graduate in Computer Science / Information Technology.


• Professional work experience of 3 to 5 years.


• Good to have Palo Alto Networks Certified Network Security Engineer (PCNSE) or Cisco Certified Network Professional (CCNP)