Security Operation Center

Your Role and Key Responsibilities:

The security consultant support clients in Assess, Implement, and Optimize the posture of their Security Operations security environments to mitigate security risks (e.g., insider and external threats, intentional and accidental). Position is for an experienced security professional with demonstrated experience within Security Operations, Threat Detection & Response, Security Intelligence, CSM (Continuous Security Monitoring) and NSM (Network Security Monitoring) within the SOC operations environment.

• Designing, maintaining and troubleshooting the SIEM environment
• Implement changes of SIEM infrastructure
• Create, maintain and consult security monitoring measures
• Building SIEM infrastructure for new customers
• Building SIEM infrastructure for new customers during onboarding projects
• Experience of log management systems / solutions (Splunk / ELK) including Dashboards
• Perform use case, rule management in the SIEM, Log management System, Integrate with log source. Optimizing the operation of Log management devices & optimizing rules
• Creation of high level and low-level design of SIEM infrastructure
• User Behavior Analysis, Breach, Threat Intelligence.
• Perform use case/rule management in SIEM
• Implementing security monitoring rules in a SIEM tooling, according to the business needs

Required Technical and Professional Expertise

• Bachelor’s degree, Cybersecurity, Information Technology, or other related fields, from an accredited university. Equivalent professional experience can be used in lieu of a degree.
• A minimum of 2 years “hands-on” experience on SOC operations (Standard Operations Procedures, Runbook and Playbooks).
• Knowledge in the most common and used frameworks (E.g., NIST CSF, ISO2700x, CMM SOC, etc.) .