16 Aug
|
Coders Brain Technology
|
Pune
16 Aug
Coders Brain Technology
Pune
Location: PAN India
JOB DESCRIPTION:
Must Have:
Please ensure the future candidates have at least 3 - 4 years of security incident investigation experience providing L2/L3 support. SOC experience/hunt is a strong plus. They must be proficient in Networking, working knowledge of networking concepts such as common TCP/UDP ports, TCP flows, LDAP, authentication, DNS components flow and analysis, HTTP response codes and be able to use this knowledge in security investigations.
OS Full-Service Management/Troubleshooting and have performed Device Level/SIEM Log Analysis. Recognize threats such as but not limited to DDOS, APT lifecycle (including Data exfiltration attempts).
Day to Day Responsibilities of entire team:
• Providing escalation response for security events including but not limited to intrusion detection, malware infections, denial of service attacks, privileged account misuse and network breaches. Event management includes triage, correlation, and enrichment of individual events to either rule out as false positive, trigger standard detective and corrective responses,
or escalating as a security incident.
Improving the service level for security operations and monitoring. Creating and maintaining system documentation for security event processing. Expands the usage of security monitoring tools to improve the security of the setting based on business use cases or changes in threat landscape, root causes from security incident response, or output from security analytics
• Monitoring Security Information and Event Management (SIEM) platform for security alerts, preferably Splunk Enterprise Security.
• Providing metrics and reports around security monitoring by designing dashboards for asset owners and management consumption. Leveraging existing technologies within the organization to expand the scope of coverage of the security monitoring service.
• Performs analysis duties, including:
o Development of Data Dictionaries for log sources to confirm which f
📌 Security Incident Investigation_CBS (Pune)
🏢 Coders Brain Technology
📍 Pune