Job Details

Provide Monitoring and Analysis support of computer security events.
*Understand and Detect Cyber Security Events.
*Perform initial triage.
*Raise Incident and perform mitigation with the help of asset owners.
*Report computer security events, in accordance with established processes and procedures.
*Be able to work with the vendors on the different IT Security Tools in place .
*Be able to update rules and profiles within the IT Security Tools .
*Be able to work with end users to fix Security issues with end points, applications and Servers.
*Track Security issues and follow up until completed.

• *Bachelor's degree with 5+ years of technical experience working in a SOC and cyber security incident response environment 
• *In-depth understanding of security threats (preferably OWASP Top 10 vulnerabilities), threat attack methods and the current threat environment *Understanding of common attacks (e.g. brute force, SYN flood, session hijack etc.) 
• *Understanding of network protocols (TCP/IP stack, SSL/TLS, IPSEC, SMTP/IMAP, FTP, HTTP etc.)
• *Stealth Watch - Alerts, Tuning & Updating Rule set 
• *Microsoft Defender Advance Threat Protection (Defender ATP) 
• *FortiGate Analyzer - Alerts, Tuning & Updating Content Filter Rule set for Web surfing/Reports 
• *Windows Event Logs - Base-line for Windows clients 
• *Server Logs with Syslog's from servers 
• *ISE - Alerts & working with quarantine Laptops 
• *Symantec - Alerts & Reports (TCS & workstation Support Team) 
• *InfoBlox for IPAM and DNS 
• *Knowledge on vulnerability scanning software: Nessus, NMAP etc.