MODULE LEAD - Cybersecurity

Service Objectives -

The IT Security department of the organization seeks proposals to provide an add-on 24x7 Managed Cyber Security Operations Services (in addition and conjunction to our existing SOC)

Establish 24x7 security operations coverage for security tools (as listed in section Supported Tools)

Enhance security tools monitoring, troubleshooting, response process and resilience

Ensure availability of security platforms

Meet stakeholder and regulatory expectations

Core Requirements

Continuous monitoring of security tools for user reported issues

Triage (analysis), escalation and response to reported issues

Security Platform operational support

Coordination with internal teams as well as security service providers / vendors

Follow incident and change management process in CSI for product upgrades, vulnerability fixes etc.

Supported Tools -

Privileged Access Management (PAM) [CyberArk Preferred]

Internet Protection/Office PC isolation/Locked file transfer platform

Database monitoring and access review

Data Security Posture Management (Data Classification)

Network detection and response [IDS/IPS, Realtime response]

Container Security support

Host-based traffic monitoring

Least privilege review & remediation

Expected Skill-sets for analysts -

Minimum of 5 years of hands-on experience supporting enterprise security operations environments

Demonstrated capabilities in administration and support of mentioned security solutions

Thorough understanding of major IT Security domains (Internet and Network Security/Web-application Firewall/End-point security/Email Security/Database security/Privilege access management etc.)

Experience in handling escalations, security incidents, active security breaches, responding and containment, root-cause assessment etc.

Preferred Industry Relevant Certifications / Educational Background In Cybersecurity

Strong analytical and problem-solving abilities

Excellent written and verbal communication

Ability to work independently during off-hours shifts

Stakeholder management skills

Attention to detail and documentation discipline

Ability to operate in high-pressure incident situations

Technical understanding / hands-on exposure to work on operating systems (Windows / RHEL), cloud platforms, configuration managements

Ready to work in shift rotation to support 24x7 coverage

Cybersecurity