Role & responsibilities
1. Handling operation of MDR solution, including software and applications.
2. Develop use cases and playbooks for SIEM and SOAR for effective and automated incident detection and handling.
3. Test SIEM SOAR and other solutions in scope to explore the right technical defense/remedy and provide performance statistics and reports.
4. Perform integration of all tools and services for access, authentication, authorization, data security, vulnerability management, policy management, auditing, and compliance to ensure companys security policy and procedures are applied.
5. Ensure effectiveness of security solutions in scope
6. Assess and Find the gaps in security controls which protects critical assets against any incidents or threats from the internal or external environment.
7. Co-ordinate with vendors/partners & internal teams to manage security platforms including deployments, maintenance and operations. Develop plans for maintaining the infrastructure in newly implemented security solutions to the operational setting.
8.
Manage Cybersecurity incidents and related process, tools and resources
9. Work with an identified Partner for effective Security operations and incident handling.
10. Conduct periodic threat hunting independently and with partners to ensure effective detection of any threats.
11. Ensure preventive maintenance of critical infrastructure, to increase performance and minimize disruption.
12. Record all the security incidents/events leading to infrastructure downtime, analyze root cause and suggest workarounds.
13. Create Reports for performance reviews, corrective action, routine equipment checks and preventative maintenance for security systems to reduce the down time of the systems.
14. Gather and report on metrics regarding security systems within ASL environments. Prepare status reports and other management metrics as needed.
Preferred candidate profile
1. Demonstrable experience within a Security Operations Center, c
📌 Senior SOC Analyst (Thane)
🏢 Dmart
📍 Thane