Qualifications

•    BE/ B.Tech/ M.Tech/ MCA with 60%+ throughout the academics.

•    Security certifications like CEH or equivalent preferred.

Work Experience - 3 yrs to 10 yrs (L1 ,L2 and L3 roles)

Experience and Skillset

•    Minimum 3 years hands-on experience with one or more SIEM tools (McAfee, Log Logic, LogRhythm, Splunk, QRadar, ArcSight etc.).

•    In-depth understanding of security threats (preferably OWASP Top 10 vulnerabilities), threat attack methods and the current threat environment.

•    Proficient in Incident Management and Response.

•    Basic knowledge of Windows and Unix environments.

•    Knowledge of OSI Model, TCP/IP Protocols, network security.

•    Knowledge about other security tools like – Packet Analyzers, HIPS/NIPS, Network Monitoring tools, Cloud Security, AV, EDR, WAF etc.

Responsibilities

•    Responsible for working in a 24x7 Security Operation center (SOC) environment.

•    Carry out investigation and correlation and work with the stakeholders towards mitigation and closure of security incidents.

•    Monitor various dash boards from different security solutions on shift basis.

•    Work with the engineering team for Sensor and SIEM rules fine-tuning.

•    Prepare various management reports from SIEM and other security solutions.

•    Provide analysis and trending of security log data from a large number of heterogeneous security devices.

•    Provide threat and vulnerability analysis as well as security advisory services.

•    Analyze and respond to previously undisclosed software and hardware vulnerabilities.

•    Investigate, document, and report on information security issues and emerging trends.

•    Seamlessly integrate with the team work culture, ensure proper information flow across shifts, prepare/take part in shift handovers.

•    Communicate effectively by contributing significantly to the development and delivery of a variety of written and visual documents for diverse audiences.

Location

Guwahati , Assam (On-Site)