Job Description
• File integrity Monitoring & Cyber Security Incident Management
As part of this profile, the resource will perform the following:
Platform Management and Administration
• Administer and manage the NNT Change Tracker FIM, including deployment, configuration, troubleshooting, and ongoing platform optimization.
• Ensure platform health, availability, and secure operation across all POS machines.
Onboarding and offboarding
• Onboarding of POS machines based on the recent store opening and PCI-scope countries
• Configuring the FIM rules
• Offboarding of agents based on the store closing request
Troubleshooting and Issue Resolution
• Monitor, identify, and resolve platform-related issues, including:
• Application and console functionality
• Communication with POS machines
• SIEM Integration
• Engage with support processes to address any anomalies that impact tool effectiveness.
Health Monitoring and Availability
• Continuously monitor the status and availability of all assets onboarded to the platform.
• Address failures or downtime to ensure uninterrupted detection coverage.
SOC Integration and Alerting
• Ensure effective integration between Canary and the Security Operations Center (SOC), including:
• Event forwarding to SIEM
• Alert correlation
• Escalation of alerts within SOC processes
• Validate alert quality and reduce false positives through periodic reviews.
Vendor Coordination
• Act as the main point of contact with the NNT Change Track vendor for:
• Technical support
• Issue resolution
• Product updates and enhancements
• Track and manage support tickets and ensure timely closure.
Access Management and Governance
• Manage user accounts and roles for the NNT change tracker management console.
• Conduct quarterly access reviews to validate access rights and enforce the principle of least privilege.
Documentation and SOP Maintenance
• Develop, maintain, and regularly update Standard Operating Procedures (SOPs) for:
• Agent deployment
• Inciden