JOB DETAIL

1. Managing SOC:

                                                               i.      Lead and manage a 24x7x365 Security Operations Centre providing technical oversight

                                                             ii.      Lead staff to proactively identify, prevent and respond to security incidents

                                                           iii.      Ensure incident identification, assessment, quantification, reporting, communication, mitigation and monitoring.

                                                           iv.      Ensure compliance to Service Level Agreements (SLA), process adherence and process improvisation to achieve operational objectives and mitigate threats.

                                                             v.      Revise and develop processes to strengthen the current operational activities; review policies and recommend changes to improve governance.

                                                           vi.      Responsible for team management, scheduling, utilization of resources and initiation of corrective action where required for Security Operations Center.

                                                          vii.      Management, administration & maintenance of security devices under the purview of SOC operations

                                                        viii.      Perform threat management, threat modelling, identify threat vectors and develop use cases for security monitoring.

                                                            ix.      Responsible for integration of standard and non-standard logs in SIEM

                                                             x.      Creation of reports, dashboards, metrics for SOC operations and presentation to client.

                                                            xi.      Co-ordinate with stakeholders to build and maintain positive working relationship; this include subordinate SOCs supporting the organization.

2. Strong understanding of Enterprise Change, Incident and Problem Management, analyze customer requirements to ensure standards, policies and guidelines are upheld from the compliance and information security perspective
3. Ensure effective deployment and operating effectiveness for various Security tools such as DLP, Proxy, IPS, IDS, WIPS, NAC, EDR, etc. suite to ensure 99.99% compliance.
4. Identification of key Cyber security needs and leading implementation of security tools/technology required for cyber security posture enhancement

1. 2.       Desired skills and certifications:
   1. Bachelor of Engineering from accredited institution.
   2. Strong knowledge of incident management, problem management and change management best practices.
   3. Superior communication skills and ability to manage stakeholders
   4. 7+ years working in a security operations centre.
   5. 3+ years in a team management/ leadership role.
   6. Experience networking and telecommunications integration, design and architecture
   7. Hold at least one relevant industry certifications (CISSP, CISA, CISM, etc.)
   8. Strong understanding of Q-radar SIEM tool
   9. Experience building and maintaining a high-performance team of analysts.
   10. Expertise with industry standard frameworks (ISO, NIST, PCI).
   11. Experience maintaining metrics and SLAs.