Security Managed Services Specialist

Security Managed Services Specialist

Implement security solutions and manage security operations center to keep client's business and assets secure. Deploy digital identity, platform security, data & AI protection, cloud security solutions to achieve continuous protection involving onshore, nearshore and offshore capabilities. Key responsibilities: Work as part of a global security analysis team that works 24/7 on rotational shift Handling tunings, customer requests, escalations, reporting, training, etc. Life cycle management of the SIEM (Onboarding, Break-fix, Patching, Live update etc) Adhering to SOPs and notify customers on log flow/log format issues Incident analysis, deep dive threat hunting and investigation and root cause analysis Creation of detection rules, testing and implementation Evaluation of client detection requirements, gap analysis, fine tuning Playbook creation for automation and integration with SOAR requirements Document best practices and writing KB articles Identify opportunities for process improvements Technical Experience: Experience in SOC Operations with customer-facing responsibilities Deep understanding on cyber security fundamentals, security devices, network defense concepts and threat landscape Hands-on experience in SIEM, SOAR, EDR and threat hunting tools Hands-on experience in creation of detection rules, playbooks for automation and response actions Desirable knowledge in any scripting language and EDR products Strong threat hunting and investigation skills and root cause analysis Knowledge on networking, Linux and security concepts Knowledge with security devices such as Firewall, DS/IPS, EDR, UTM, Proxy, Cloud solutions, etc. Knowledge on log collection mechanisms such as Syslog, Log file, DB & API Preferable certifications - GCIA, GCFA Professional Attributes: Passion for cyber security, learning, and knowledge sharing Strong Verbal & written communication skills Proven customer service skills, problem solving and interpersonal skills Ability to handle high pressure situations Consistently exhibit high levels of teamwork Must have skills: Networking Fundamentals, security threat analysis and EDR investigation skills, rule writing and playbook creation Good to have skills: Network Security (Firewall, IDS/IPS, Endpoint AV, EDR etc.), scripting Educational Qualification: Bachelor's Degree in computer science, prior experience in information security or SOC operations Additional Information: Following certifications is added advantage: GCIA, GCFA, CISSP