Technical Security Operations Center (SOC) Administrator

About Us:

A leading transit-packaging provider with a proud tradition of offering a range of innovative and effective products and solutions to our customers globally.

With over $2.5B in revenue, 80+ manufacturing facilities across 6 continents and over 7,000 employees worldwide, Signode is a leading manufacturer of a broad spectrum of transit packaging consumables, tools, software, and equipment that optimize end-of-line packaging operations and protect products in transit. Signode brings this extensive product portfolio together under hundreds of trusted brands to offer complete transit packaging solutions to its customers.

We produce strap, stretch and protective packaging. We also manufacture packaging tools and equipment used to apply the bulk packaging materials. These commercial packaging products are used to pack, bundle, unitize, protect and secure goods during warehousing and transit. Our company is a pioneer in the industrial packaging sector with a long history of customer-focused innovations in materials, processes and automation technology that have revolutionized the sector.

We are proud to be the Transit Packaging Division of Crown Holdings, Inc. We are excited to go to market as Signode and to share the portfolio of products, services and capabilities that make us the world’s premier end-of-line packaging company.

What you will be doing:

This position will be part of Signode’s IT Security Operations Center (SOC) team and will be responsible for all internal security operations tasks as they pertain to the Security Operations Center. This position will be expected to work alongside the team to detect, investigate, and technically respond to security incidents, as well as working towards improving SOC processes.

• Monitoring of security alerts through ITSM platforms
• Technically investigate to determine the root cause analysis of security alerts to understand their overall impact and risk to the organization
• Monitoring, evaluating, and profiling of cyber threats to the organization
• Creation and tuning of correlation rules
• Perform log analysis from multiple technical security solutions
• Performing email security investigations (email headers, SPF, DKIM, DMARC)
• Proactively hunt security threats and anomalies on the network
• Analyze malware statically and dynamically in a sandbox environment
• Stay up to date with the latest threat attack vectors and countermeasures
• Develop and maintain documentation on SOC processes and procedures
• Technical experience with Microsoft Server and Endpoint operating systems
• Technical experience with Linux and Unix operating systems

Qualifications:

1. B.Tech. or any graduate
2. Cybersecurity Certifications
3. Good academic records, 60 % & above across all academics
4. Azure Certifications – AZ-900 or SC-900

Experience:

• 4-5+ years in a hands-on technical role in cyber security operations
• 4-5+ years of experience within an internal SOC or an MSSP

Skills required:

1. Knowledge of Microsoft Azure environments and solutions
2. Experience working with and analyzing logs related to IDPS, EDR, and firewall solutions
3. Solid understanding of:

• Incident response
• Malware analysis
• Endpoint and network digital forensics
• Security detection rules
• Best security practices and frameworks