Must have hands-on experience on Splunk, QRADAR SIEM/DNIF etc.
Experience as a Cyber Security SOC -Analyst, incident response, incident analysis(incident management) in 24/7 SOC setting
Installation, configuration and version upgrades for SIEM infrastructure.
Ability to create/generate reports and customized dashboards.
Providing RCA for the major incident occurred in customer environment
Understanding of Incident response plan.
Good hands-on experience on threat hunting/ (Active and Passive) and use case fine tuning.
Able to create custom parsers for integrating various applications, databases and security tools.
Basic server/application management of Unix/Linux/Windows platform.
Brand Protection Intelligence - Monitoring of any suspicious activity related to brand on Dark web, deep net or underground forums for: Direct threats against or targeting system
Relevant domains, email addresses, and external subnets on the deep and dark web.
Unlimited takedown services
Brands and aliases mentioned on the deep and dark web.
Adversary Centric Intelligence - Threat actor profiling to mitigate/control the issue proactively
Must Have
Certification in DNIF /Qradar/Splunk/SIEM platform certification.