Job Description

TECHNICAL SKILLS \xe2\x97\x8f Arcsight,Splunk,SOAR \xe2\x97\x8f Symantec DLP \xe2\x97\x8f Symantec SEP \xe2\x97\x8f Symantec Encryption \xe2\x97\x8f Cortex XDR \xe2\x97\x8f Checkpoint IPS \xe2\x97\x8f Windows, Ubuntu & MAC \xe2\x97\x8f CyberArk \xe2\x97\x8f Zscaler \xe2\x97\x8f Nessus Requirements:

• Bachelor of engineering or Science in computers, information systems, information security, Math, decision sciences, risk management, or other business/technology disciplines or equivalent work experience.
• CISSP, CEH or equivalent.
• Able to work in shifts on a rotating basis for 24X7.
• Three to five years\xe2\x80\x99 experience in security information and/or technology engineering support.
• Experience with the following technologies: leading SIEM technologies (Splunk\\Qradar\\LogRhythm\\Nitro\\Chronicle) IDS/IPS, network- and host- based firewalls, data leakage protection (DLP), common EDR platforms etc.
• Understanding of possible attack activities such as network probing/ scanning, DDOS, malicious code activity, exfiltration, credential access, etc.
• An understanding of the Cyber Kill Chain, the MITRE attack framework, various TTPs described within and commonly used by attackers as well as how to write detection rules for them in SIEM and EDR solution.
• Understanding of tools, technologies and logging mechanism including understanding to common network devices such as routers, switches, load balancers etc.
• Understanding of typical cloud threats and knowledge of how to detect and prevent them, cloud logging and audit capabilities and the ability to develop detection rules around these
• Understanding of basic networking protocols such as IP, DNS, HTTP, and the network stack.

Job Types: Full-time, Permanent Salary: \xe2\x82\xb91,500,000.00 - \xe2\x82\xb91,800,000.00 per year Schedule:

• Monday to Friday
• Rotational shift

Ability to commute/relocate:

• Hyderabad, Telangana: Reliably commute or planning to relocate before starting work (Required)

Experience:

• total work: 5 years (Required)
• Google Chronicle SIEM: 5 years (Preferred)

Application Deadline: 03/09/2023