Required Skills

SOAR SIEM

Work Authorization

  • US Citizen

  • Green Card

  • EAD (OPT/CPT/GC/H4)

  • H1B Work Permit

Preferred Employment

  • Corp-Corp

Employment Type

  • Consulting/Contract

education qualification

  • UG :- - Not Required

  • PG :- - Not Required

Other Information

  • No of position :- ( 1 )

  • Post :- 2nd Aug 2022

JOB DETAIL

·         Collaborating with stakeholders to confirm and identify all requirements for engineering services

·         Designing and building proof-of-concept enhancement(s)/solution(s) in the appropriate security platform

·         Implement enhancement(s)/solution(s) into the production security solution(s)

·         Creating, updating, and maintaining standardized documentation for ongoing maintenance and support

·         Coordinating any Change Management, Release, and/or other Go-Live activities

·         Assess and troubleshoot security system or service errors that have been escalated from initial triage teams

·         Support Incident Response activities as needed

·         Contribute to the research, selection, and implementation of alternative security technology solutions to reduce costs, improve performance, and/or meet updated requirements

·         Participating in, or conducting, security training for personal and cross-functional team development

 

Qualification Section

  • Relevant years of work experience required
  • Working knowledge of engineering and configuring at least 2 of the following systems:
    • Security Orchestration & Automation Response (SOAR)
    • Endpoint Protection/Endpoint Detection & Response (EPP/EDR)
    • Security Incident & Event Monitoring (SIEM)
    • Cyber Threat Intelligence (CTI)
    • Deception Technology

 

Added Bonus If You Have 

  • Working knowledge of engineering and configuring 4 or more of the following systems:
    • Security Orchestration & Automation Response (SOAR)
    • Endpoint Protection/Endpoint Detection & Response (EPP/EDR)
    • Security Incident & Event Monitoring (SIEM)
    • Cyber Threat Intelligence (CTI)
    • Deception Technology
  • Working knowledge of engineering and configuring of any of the following systems:
    • Cloud Access Security Broker (CASB)
    • Data Classification
    • File Access & Auditing
    • Data Loss Prevention Solutions (Email, Host, Network)
    • Email Encryption
    • Vulnerability Management
    • Code Scanning
    • Forensic Software
    • Security Governance, Risk, Compliance Management
  • Certified Information Systems Security Professional (CISSP) or equivalent
  • GIAC Penetration Tester (GPEN) or equivalent Information Systems Security Architecture Professional (ISSAP)
  • GIAC Security Essentials (GSEC) or equivalent

Company Information