Team Lead - SOC

Team Lead - SOC

Location: Hyderabad

Exp: 8+ Yrs

SHI Solutions India Pvt Ltd looking for SOC Lead with experience in a combination of risk management, Information security and IT roles

• Bachelors degree in Computer Science, Information Technology, or equivalent experience with professional security management certification
• Security Operations Centre and Incident Response skills
• Analytical Skills
• Cybersecurity and Network Security expertise
• Strong problem-solving abilities
• Excellent communication and teamwork skills
• Relevant certifications such as CISSP, CEH, or CompTIA Security+
• Bachelor's degree in Computer Science, Information Technology, or related field
• Knowledge of common information security management frameworks, such as ISO/IEC 27001, and NIST.
• Excellent written and verbal communication skills and high level of personal integrity
• Experience as a Senior Security Analyst leading a team
• Experience with Security Operations Center, network event analysis and/or threat analysis
• Experience working as an Incident Responder
• Knowledge of various security methodologies and technical security solutions
• Experience analyzing data from cybersecurity monitoring tools
• Ability to analyse endpoint, network, and application logs
• Experience tuning and/or configuring SIEM and vulnerability tools
• Knowledge of common Internet protocols and applications
• Scripting experience in Linux or PowerShell preferred
• Experience with Cloud computing across virtualized environments

Responsibilities:

• Responsible for conducting information security investigations as a result of security incidents identified by the Level 2 security analyst who are monitoring the security consoles from various SOC entry channels (SIEM, Tickets, Email and Phone)
• Act as a point of escalation for Level-2 SOC security analysts in support of information security investigations to provide guidance and oversight on incident resolution and containment techniques.
• Should have experience in Developing new correlation rules Parser writing
• Experience in Log source integration
• Act as the lead coordinator to individual information security incidents
• Mentor security analysts regarding risk management, information security controls, incident analysis, incident response, SIEM monitoring, and other operational tasks (tools, techniques, Procedures) in support of technologies managed by the Security Operations Centre.
• Document incidents from initial detection through final resolution.
• Participate in security incident management and vulnerability management processes.
• Coordinate with IT teams on escalations, tracking, performance issues, and outages.
• Works as part of a team to ensure that corporate data and technology platform components are safeguarded from known threats.
• Communicate effectively with customers, teammates, and management.
• Prepare Monthly Executive Summary Reports for managed clients and continuously improve their content and presentation.
• Provide recommendations in tuning and optimization of security systems, SOC security process, procedures and policies.
• Define, Make and maintain SIEM correlation rules, customer build documents, security process and procedures.
• Follow ITIL practices regarding incident, problem and change management.
• Staying up to date with emerging security threats including applicable regulatory security requirements.
• Maintain an inventory of the procedures used by the SOC and regularly evaluate the SOC procedures and add, remove, and Edit the procedures as appropriate
• Publish weekly reports to applicable teams.
• Generate monthly reports on SOC activity.
• Should be skilled on Deception Technology, EPP, EDR, IPS/IDS desirable.

Please your CV to Annapurna.t@locuz.com.