SIEM Admin

Job Posting Title: SIEM Admin

Location: Noida

Shift and Schedule: Rotational Shifts 5 Days Office

Job Description Summary:

Works to protect organizational systems, networks, and data from unauthorized access, theft, damage, or other malicious activities. Proactively engages in the threat hunting process, searching for advanced threats, attackers, and indicators of compromise (IOCs) that may have evaded existing security measures, to identify and mitigate security threats before they cause significant harm to an organization. Engages in endpoint detection and response (EDR) to detect and respond to security incidents at the endpoint level, such as on individual workstations, laptops, servers, and other devices. Participates in collecting, analyzing, and preserving digital data for use as evidence in investigating cybercrimes, security breaches, and other types of digital incidents for the purposes of forensics. Utilizes the incident management process of managing and responding to cybersecurity incidents, which may include unauthorized access to systems, data breaches, malware infections, denial-of-service attacks, and other types of cyber threats. Uses Network Detection and Response (NDR) to monitor network traffic and identify and respond to unusual or suspicious activity. Gathers analyzes and interprets information to identify potential security threats and risks as part of security intelligence analysis.

Required Skills and Experience:

•7-8 years of security analyst experience, preferably in a managed services environment •Experience with cloud security, devops, cyber resiliency/incident management, Zero Trust, network/EDGE security, and emerging technologies such as IoT and AI

•Expertise in network, host, and cloud-based security, attack techniques, analysis, and investigation

•Experience threat hunting, proactively and iteratively searching to detect advanced threats that evade existing security solutions

•Deep understanding of the current cyber threat landscape, the different tactics commonly used by adversaries and how you would investigate, contain and recover against their attacks

•Expertise with security incident response process

Preferred Skills and Experience:

•Bachelor's degree in computer science, Cybersecurity, Information Technology, or other related fields

•Preferred Certifications in Cyber Security: ECTHP (Certified Threat Hunting Professional) or ECMAP (Malware Analysis Professional); other specialized security analyst certifications •Experience in Cloud Security monitoring and in advanced analytics (UEBA)