Experience: Minimum 10 years of experience in implementing and handling security related products & services in an organization and out of total experience, 5 years of minimum experience should be as an L2 in SOC management.

Skills: Experience in 3 or more areas of security like (Security Incident and Event Management (SIEM) Qradar along with SOAR & TIP: Q Radar / Vulnerability Assessment Scanner(VAS): Rapid 7 / Data Base Activity Monitoring(DAM): Imperva / Deception Technology).

Administration of SIEM environment (like deployment of solution, user management, upgrades and patch deployment, addition or deletion of log sources, configuration management, change management, report management, manage backup, restoration and recovery etc)

Construction of SIEM content required to produce Content Outputs (e.g., filters, active lists, correlation rules, reports, report templates, queries, trends, variables)

Collects/updates threat intelligence feeds from various sources/platform and Integration of customized threat intelligence content feeds provided by the Threat Intelligence Platform & Analytics service

Identifies possible sensor improvements to prevent incidents.