SOC L3

Role: SOC L3

Location: Mumbai

Experience: 11+ Years

Roles and Responsibilities:

1. Must have hands-on experience on Splunk, QRADAR SIEM/DNIF etc.
2. Experience as a Cyber Security SOC -Analyst, incident response, incident analysis(incident management) in 24/7 SOC environment
3. Installation, configuration and version upgrades for SIEM infrastructure.
4. Ability to create/generate reports and customized dashboards.
5. Providing RCA for the major incident occurred in customer environment
6. Understanding of Incident response plan.
7. Good hands-on experience on threat hunting/ (Active and Passive) and use case fine tuning.
8. Able to create custom parsers for integrating various applications, databases and security tools.
9. Basic server/application management of Unix/Linux/Windows platform.
10. Brand Protection Intelligence - Monitoring of any suspicious activity related to brand on Dark web, deep net or underground forums for:
11. Direct threats against or targeting system
12. Relevant domains, email addresses, and external subnets on the deep and dark web.
13. Unlimited takedown services
14. Brands and aliases mentioned on the deep and dark web.
15. Adversary Centric Intelligence - Threat actor profiling to mitigate/control the issue proactively

Must Have:

Certification in DNIF /Qradar/Splunk/SIEM platform certification.