Security Operations Center Architect

About the Role

SOC Lead

Responsibilities

Upgrade and maintenance of SIEM Device

Cyber incident and forensic investigation.

Logs analysis and co-relation of security events.

Self-motivated and quick learner and should be flexible in working 24

• 7 environment

Required Skills

Must have hands on experience on DNIF, Arcsight, QRADAR SIEM, Qradar / qroc, sentinel.

Analysis of security events and containment for all security incident events to safeguard Customer infra.

Installation, configuration, and version upgrades for SIEM device.

Applying signature / IOC on security devices.

Providing RCA for the major incident occurred in customer environment.

Understanding of Incident response plan.

User case creating, fine tuning and log source onboarding.

Integration with ServiceNow, Tenable.

Good hands-on experience on threat hunting (Active and Passive).

Able to create customer parser for integration with SIEM solution.

Have good understanding of Unix / Linux platform.

Preferred Location

Chennai,Bangalore,Mumbai,Hyderabad