Role & responsibilities
Tools: - Crowdstrike, Zscaler,, DLP, SIEM, & Python Scripting for automation
Skill Set: -
Should have good knowledge on: -
1. Endpoint Security
2. Web Filtering & proxy
3. Cloud Security
4. Email Security
5. SIEM & SOAR
6. Network Detection & Response
7. DLP Admin
8. Python Scripting & Automation
Roles And Responsibilities: -
- Develop detection rules to support our SOCs alerting and response capabilities.
- Provide expert analytic investigative support to analysts for complex security incidents.
- Implement and execute administrative, management, and lifecycle procedures for the SIEM.
- Review security controls measures, identify gaps in the security architecture, and implement improvements or enhancements as needed.
- Implement email security standards such as DKIM, SPF and DMARC.
- Demonstrated experience with deploying and operating network security tools, including but not limited to Antivirus, IDS, firewalls, proxies and security gateways.
- Evaluates system security configurations to ensure efficacy and compliance with policies and procedures.
- Researches and investigates the potential impact of new threats and exploits and recommends solutions to management.
- Provides guidance on risks, vulnerabilities, or potential vulnerabilities within the architecture.
- Deploy, configure, and maintain Data Loss Prevention (DLP) tools and solutions across enterprise systems.
- Automate administrative tasks, reporting, and data processing using Python scripts and applications.
- Excellent communication skills both written and verbal include the capacity to communicate complex and technical issues.