SOC/SIEM Experts

Infosys; Bengaluru; On-site; INR 800,000 - 1,200,000; Full time

Job summary

Infosys is seeking a Cyber Security professional to manage security operations and incident responses. This role involves hands-on experience with SIEM tools like IBM QRadar or Splunk and requires a strong background in information security operations.

The ideal candidate should hold a degree (MCA/BSc/BCA/BEng) and possess comprehensive knowledge in managing cybersecurity incidents and teams. This is an opportunity to contribute to a pivotal function in enhancing digital security across the organization.

Qualifications

• Minimum experience in Information Security operations management, ideally in large security operations centers.
• Hands-on experience with SIEM tools like IBM QRadar or Splunk.
• Bachelor's degree in relevant fields is required.

Responsibilities

• Manage network and endpoint security initiatives.
• Oversee cybersecurity incidents and responses.
• Develop and manage Incident Response plans.

Skills

Information Security operations management

Cyber Security incident response

IBM QRadar/Splunk/ArcSight

Data Security

Incident Management

Digital Forensics

SIEM

Education

MCA/BSc/BCA/Bachelor of Engineering

Tools

Splunk

ServiceNow

IBM Security Identity Manager

Symantec Endpoint

Google Cloud Platform

Job description

Educational Requirements

MCA,BSc,BCA,Bachelor of Engineering,Intergrated course BCA+MCA

Service Line

Cyber Security

Responsibilities

• At least experience in Information Security operations management with hand on experience in large security operations center using IBM QRadar/Splunk/ArcSight or similar SIEM tool.
• Manage network, endpoints and forensics initiatives, malware triage and cyber security incident response
• Managing Cyber Security Services engagements and engagement teams
• Recognizing common attacker tools, tactics, and procedures
• Providing oversight for on-site examinations and collections and technology advisory services to enhance forensic client engagements
• Researching and developing new digital forensics scripts, tools, and methodologies
• Assessing and troubleshooting a variety of technical issues and support a cyber response lab on our clients SIEM tool and UEBA platform
• Assist in conducting peer reviews and providing quality assurance reviews for junior personnel and will support the mentoring of junior incident managers and provide guidance to others on incident management prioritization, triage and report writing in support of onsite engagements.
• Guiding the team to Monitor, identify and investigate the security alerts and perform incident response activities related to cybersecurity incidents
• Creates new trouble tickets for alerts that signal an incident and require Tier 2 / Incident Response review
• Respond to cybersecurity incidents, conduct threat analysis as directed and address detected incidents for resolution
• Should be able do multitasking to coordinate incident with Sr analyst and escalation manager
• Recommend enhancements to SOC security process, Operations efficiencies.
• Create Incident response (IR) plan, IR play books, manage all incidents and crisis situations.
• Log Analysis, handle, resolve security incidents.
• Collaborate with respective tracks/technical team for remediation of the incident.
• Periodical review of incident response plan and procedures.
• Recommend and document specific countermeasures and mitigating controls
• Develop comprehensive and accurate reports and presentations for both technical and executive audiences

Preferred Skills

• SOC
• Data Security->Public Key Infrastructure(PKI)
• IDAM->CA Siteminder(CA Identity Suite)
• IDAM->IBM Security Identity manager(ISIM)
• Infrastructure Security->Symantec Endpoint(SEP)
• Infrastructure Security->Malware Analysis
• Security Incident and Event Management(SIEM)->QRadar
• Security Incident and Event Management(SIEM)->Arcsight
• Security Incident and Event Management(SIEM)->RSA Envision
• Security Incident and Event Management(SIEM)->Logrythm
• SOC->Security Operations Center(SOC/SIEM)
• SOC->Security Monitoring
• Devops->Google Cloud Ptatform (GCP)
• Security testing->Cloud Security
• Tools->Splunk
• Network Security->Firewalls->Checkpoint
• Network Security->Firewalls->Web Application Firewall(WAF)
• Network Security->Firewalls->Juniper-Firewalls
• Network Security->Firewalls->Palo Alto
• Tools->Service Now->ServiceNow-Security