5+ years of experience in Cyber Security SIEM administration.
Soft skills, Excellent communication skills, interpersonal skills consulting with client teams working in distributed teams.
Should have Prior experience on SIEM admin, SIEM deployment / setup, SIEM integration troubleshooting, license management, SIEM engineering etc.
Good to have Health Care Domain experience.
Ability to work effectively under pressure and identify ambiguity and drive for clarity Capable of handling multiple tasks concurrently.
JOB RESPONSIBILITY
Primary Duties:
Provide 24x7 support of the tools and technologies utilized within the CSOC. On-Call support and Level 1 Triage during (US) non-business hours for the tools and technologies we support.
Break-fix support. Respond to tickets assigned to the team by internal technical and business service teams.
Implementation of tool/technology changes after hours and on the weekend
Assist in the deployment, licensing, receiving and configuration of Log collection technologies like Splunk, SumoLogic
Collect Log source evidence from SIEM tool to respond to internal and external audit request.
Operational Hygiene for the tools we support including but not limited to password rotations, certificate renewals, access reviews, and disaster recovery work.
Research and respond to SIEM log onboarding. offboarding and troubleshoot log ingestion issues with various internal and external log sources.
Support SIEM tools with software-a-as-service model, able to understand cloud based SIEM operations and work with Vendor team on maintenance tasks.
Partner with various support teams during company mergers acquisitions to setup log collection and analysis to central SIEM tool.
Work with Threat hunting to team to enrich SIEM logs with tools like Anomali, Virus Total.
Support and maintain live log monitoring alerts to SIEM tool from high priority security and threat activity logs.
Report outages on log collection to Security operations center and Threat hunting teams and work with vendor/application support teams on support cases to resolution.
Work on Security orchestration, automation, and response (SOAR) capabilities using Palo Alto XSOAR to improve efficiency and shorten incident response times, improving security and risk management by integrating teams, processes, and tools.
Proactively collaborating
QUALIFICATION
Graduates having Bachelor degree with relevant experience
Strong knowledge of SIEM administration and other security technologies
EXPERIENCE
5+ years of experience in Cyber Security SIEM administration.
SKILLS AND COMPETENCIES
Minimum of 5+ years of experience in Cyber Security SIEM administration.
Effective Organizational, time-Management and decision-making skills Expert analytical skills, organizational skills, attention to detail, and ability to oversee defects and result validation.
