Job Description
Key Responsibilities & Accountabilities:
- Develop detailed plan of action for security services scope of work and leads the security incident monitoring team.
- Keep abreast with evolving threats/risks, industry trends and works to implement best practices.
- Review, monitor and provide resolution / mitigation plan for information and security incidents.
- Undertake and complete tasks independently and work under minimal supervision. Prioritize and switch gears in a time-sensitive managed services environment.
- Forensics experience is advantage.
- Excellent attention to detail; Resilient and approachable with the ability to work successfully in a dynamic, fast paced environment.
- Ability to operate as a team player, with a flexible and positive attitude; Strong analytical and problem-solving skills; Ability to work under pressure.
- A self-starter able to work independently but comfortable and effective working in a team environment. Commitment to accuracy and precision with all outcomes.
Education & experience:
- 10+ years of experience is required.
- Experience in managed information security services, information security domain, IT security policies, security tools & technologies, security tool deployment and implementation projects, security incident handling, security project roll outs, governance and compliance
- Experience leading specific programs and lead the transformation services in security domain should have familiarity with security industry best practices standards.
- Understanding of network perimeter, end user and application security controls that can be leveraged to secure infrastructure. Experience and exposure as security architect including multiple security domains.
- Experience of leading security domains including Vulnerability Management, Identity & Access Management, Security Operations Centre, Privileged Access Management, and overall Security Architecture etc.
- More than 6-8 years’ experience as SOC Analyst. Minimum of 3 years hands on experience with SOAR platform, SIEM tools and log management tools
- Experience of working within medium to large scale complex IT environments in telecommunication industry
- Hands-on experience of Security incident response in large scale enterprise set-up and strong grounding in processes, procedures, tools and methodologies used in SOC environment.
- Proven experience in analysing security exposures and implementing cost effective passive, reactive, and proactive programs to address these exposures.
- In-depth knowledge of security concepts such as security operations centre (SOC), cyber-attacks and techniques, threat vectors, risk management, incident management.
- Excellent analytical and problem-solving skills as well as interpersonal skills to interact with team members, vendors and upper management.
- Familiarity in malware and attack techniques, understanding and implementation experience in MITRE kill chain.