SOC Analyst

Required Skills and Experiences:

• 5 years plus experience in Security Operations or similar role
  
• Management and Coordination of Security Incidents
  
• Strong Documentation creation skills (Word documentation for
  sharepoint repositories plus Documentation on Confluence)
  
• Should be able to work with Ivanti RBVM SaaS and Qualys VM
  Platforms
  
• A General Understanding of Cloud WAF and Bot Management Concept
  
• Should be able to work with PKI and Certificates Management
  
• Should be able to work with Trellix Email security platform
  
• Should be able to work with Sophos AV Platform (Linux Skills
  will be required)
  
• Should be able to work with HCL Appscan Platform (Windows Admin
  and IIS Skills will be needed) . Appscan 360 is planned to be deployed
  later this year for which Linux and Kubernetes skills will be required
  
• Should be able to work with Google SecOps (SIEM and SOAR)
  
• Strong understanding of AWS Concepts
  

Key Accountabilities:

• Provide expert advice to organisational leaders and key
  stakeholders in security operational needs, electronic security
  infrastructure and associated risk management controls to ensure
  compliance with governance and quality requirements for the successful
  delivery of key business outcomes.
  
• Manage the performance of central security services to ensure
  service delivery meets the contractual arrangements and obligations and
  delivers on organisational initiatives.
  
• Monitor security systems and coordinate appropriate response to
  ensure security incidents are dealt with in a timely and secure manner.
  
• Ensure the accurate reporting of security incidents and conduct
  post incident reviews, including threat specific security risk assessments
  to support the capturing of lessons learnt, and to provide timely
  recommendations on the adaptation of policies and procedures to support
  risk minimisation strategies, reduce harm and prevent incident
  re -occurrence.
  
• Establish and maintain strong relationships with local and
  central security authorities to create collaborative networks and
  establish critical local response arrangements.
  
• Review our architecture and design through a security lens to
  provide actionable, timely requirements and recommendations.
  
• Keep up to date with new developments in the security industry
  including advisories, malware, vulnerabilities and viruses.