Cyber Sec_Firewall_SOC/SIEM_VAPT Experts

Infosys; Khordha; On-site; INR 900,000 - 1,400,000; Full time

Job summary

Infosys seeks a seasoned security operations professional to lead SOC activities, incident response, and forensics advisory services. You will manage SIEM tooling, threat analysis, and cross-team coordination to ensure rapid containment and remediation.

The role emphasizes hands-on incident management, security monitoring, and documentation for executive audiences, with opportunities to mentor junior staff and improve processes.

Qualifications

• Experience in security operations management within a large SOC.
• Hands-on with SIEM tools such as QRadar, Splunk or ArcSight.
• Ability to manage cyber security incident response across networks, endpoints and forensics.

Responsibilities

• SOC operations and incident response management.
• Oversee cyber security services engagements and teams.
• Recognize attacker tools, tactics and procedures.
• Guide on-site examinations and forensics advisory services.
• Develop new digital forensics scripts and methodologies.
• Support SIEM/UEBA platform troubleshooting and threat analysis.
• Mentor junior incident managers and conduct quality assurance.

Skills

Application Security

Cloud Security

GRC

OT Security

SOC

Blockchain Security

Vulnerability Management

Network Security

AWS DevOps

Nessus

Wireshark

Burpsuite

Devsecops

AWS Security

Azure Security

Data Classification

Data Encryption

PKI

IBM Guardium

Risk Assessment

RSA Archer

OID/JCA Siteminder

Sailpoint

Cyberark

Ping/Federate

ISIM

Okta

Antivirus

SEP

Malware Analysis

Email Security

QRadar

Arcsight

RSA Envision

LogRhythm

ServiceNow Security

GCP

Protection in Firewalls

Education

Integrated BCA+MCA

Bachelor of Engineering

BCA

BSc

MCA

Tools

QRadar

Splunk

ArcSight

RSA Envision

LogRhythm

ServiceNow Security

Job description

Educational Requirements

Intergrated course BCA+MCA,Bachelor of Engineering,BCA,BSc,MCA

Service Line

Cyber Security

Responsibilities

• SOC At least experience in Information Security operations management with hand on experience in large security operations center using IBM QRadar/Splunk/ArcSight or similar SIEM tool.
• Manage network, endpoints and forensics initiatives, malware triage and cyber security incident response
• Managing Cyber Security Services engagements and engagement teams
• Recognizing common attacker tools, tactics, and procedures
• Providing oversight for on-site examinations and collections and technology advisory services to enhance forensic client engagements
• Researching and developing new digital forensics scripts, tools, and methodologies
• Assessing and troubleshooting a variety of technical issues and support a cyber response lab on our clients SIEM tool and UEBA platform
• Assist in conducting peer reviews and providing quality assurance reviews for junior personnel and will support the mentoring of junior incident managers and provide guidance to others on incident management prioritization, triage and report writing in support of onsite engagements.
• Guiding the team to Monitor, identify and investigate the security alerts and perform incident response activities related to cybersecurity incidents
• Creates new trouble tickets for alerts that signal an incident and require Tier 2 / Incident Response review
• Respond to cybersecurity incidents, conduct threat analysis as directed and address detected incidents for resolution
• Should be able do multitasking to coordinate incident with Sr analyst and escalation manager
• Recommend enhancements to SOC security process, Operations efficiencies.
• Create Incident response (IR) plan, IR play books, manage all incidents and crisis situations.
• Log Analysis, handle, resolve security incidents.
• Collaborate with respective tracks/technical team for remediation of the incident.
• Periodical review of incident response plan and procedures.
• Recommend and document specific countermeasures and mitigating controls
• Develop comprehensive and accurate reports and presentations for both technical and executive audiences

Preferred Skills

• Application Security
• Cloud Security
• GRC
• OT Security
• SOC
• Blockchain Security
• Vulnerability Management
• Network Security
• AWS DevOps
• Application Security->Nessus
• Application Security->Wireshark
• Application Security->Burpsuite
• Application Security->Devsecops
• Cloud Security->AWS Security
• Cloud Security->Azure Security
• Data Security->Data Classification
• Data Security->Data Encryption
• Data Security->Public Key Infrastructure(PKI)
• Data Security->IBM Guardium
• GRC->Risk Assessment
• GRC->RSA Archer(e-GRC)
• IDAM->Oracle Identity Manager(OIM)
• IDAM->Oracle Access Manager(OAM)
• IDAM->CA Siteminder(CA Identity Suite)
• IDAM->Sailpoint
• IDAM->Cyberark
• IDAM->Ping/Federate
• IDAM->IBM Security Identity manager(ISIM)
• IDAM->Okta
• Infrastructure Security->Antivirus
• Infrastructure Security->Symantec Endpoint(SEP)
• Infrastructure Security->Malware Analysis
• Infrastructure Security->Email Security
• OT Security->OT Security
• Security Incident and Event Management(SIEM)->QRadar
• Security Incident and Event Management(SIEM)->Arcsight
• Security Incident and Event Management(SIEM)->RSA Envision
• Security Incident and Event Management(SIEM)->Logrythm
• SOC->Security Operations Center(SOC/SIEM)
• SOC->Security Monitoring
• SOC->Breach Response
• Devops->Google Cloud Ptatform (GCP)
• Security testing->Cloud Security
• Tools->Splunk
• Network Security->Firewalls->Checkpoint
• Network Security->Firewalls->Web Application Firewall(WAF)
• Network Security->Proxy->Blue Coat
• Network Security->Firewalls->Juniper-Firewalls
• Network Security->Load Balancer->F5
• Network Security->Firewalls->Palo Alto
• Tools->Service Now->ServiceNow-Security