Implement security solutions and manage security operations center to keep client's business and assets secure. Deploy digital identity, platform security, data & AI protection, cloud security solutions to achieve continuous protection involving onshore, nearshore and offshore capabilities.
Key responsibilities:
Work as part of a global security analysis team that works 24/7 on rotational shift
Handling tunings, customer requests, escalations, reporting, training, etc.
Life cycle management of the SIEM (Onboarding, Break-fix, Patching, Live update etc)
Adhering to SOPs and notify customers on log flow/log format issues
Incident analysis, deep dive threat hunting and investigation and root cause analysis
Creation of detection rules, testing and implementation
Evaluation of client detection requirements, gap analysis, fine tuning
Playbook creation for automation and integration with SOAR requirements
Document best practices and writing KB articles
Identify opportunities for process improvements
Additional Information:
Following certifications is added advantage: GCIA, GCFA, CISSP