Senior SOC Engineer-L2

Must-Have Skills:

1. Over 4+ years of experience with Arc Sight

2. Understanding and proven hands-on experience in SIEM concepts such as correlation,

aggregation, normalization, and parsing

3. Experience with deploying and managing a large SIEM deployment

4. Excellent understanding of enterprise logging standards, with a focus on application

logging

5. Excellent understanding of regular expressions, development of custom/ex Parsers

6. Excellent Unix Shell scripting skills

7. Excellent understanding of Cyber Security Operations, Incident Response

processes

8. Excellent understanding of web application architectures and web services

9. System administration experience in a Windows and Unix environment

10. Experience in using scripting languages to automate tasks and manipulate data.

Good-to-Have Skills:

1. SIEM Vendor Certications

2. Programming experience

3. Advanced knowledge of content creation concepts and best practices

Academic Qualications:

1. Bachelors degree in engineering, computer science, information security, or

information systems

Key Perf ormance Indicators:

1. Develop advanced SIEM correlation rules, reports and dashboards to detect emerging

threat

2. Manage, develop and tune the scripts that integrate SIEM

3. Create technical documentation around the content deployed to the SIEM

4. Monitor the impact of deploying new content to the health and performance of the

SIEM

5. Lead logging from multi-tier applications into the enterprise logging platforms

6. Develop specic content necessary to implement Security Use Cases and transform

into correlation queries, templates, reports, rules, alerts, dashboards, and workow

7. Develop advanced reports to meet the requirements of key stakeholders

8. Collaborate with key stakeholders within GIS and Cyber Security to develop specic

use cases to address specic business needs

9. Collaborate with application owners to dene and establish logging standards to

address various governance requirements.