SOC L3/Serving Professional

Call :9202551388

Strong Security Fundamentals

• Exclusive experience in Administration and Maintenance of Splunk/Qradar
• Expertise in Splunk use case and rules creation
• Ability of Threat Modelling and Use Case Development
• Ability to review policies of security monitoring tools based on security concepts and logical approach.
• Strong working knowledge of Splunk and its components
• Knowledge with Oracle database installation and configurations
• Knowledge in UNIX, Linux, and Windows operating systems
• Advanced technical writing skills and communication skills
• Troubleshooting and problem-solving skills

Key Responsibilities

• To handle the daily monitoring of information security events on the Splunk console
• To function as an intrusion analyst by examining security events for context, appropriateness, and criticality
• To act as an information security researcher to provide insight and understanding of new and existing information security threats

Key Operational Activities

• Daily checklists and tasks
• Log analysis and review
• Vulnerability management activities
• Alert analysis
• Investigation of suspicious security event activity
• Maintain and enforce adherence to corporate standards, policies and procedures

Key Job Functions

• Keep SOC documentation
• Understand the latest security information and exposure to the enterprise
• Understand security device functions and outputs as it relates to:
• Firewall
• IDS/IPS
• Router/Switch
• Vulnerability Scan
• Antivirus
• Understand vulnerabilities to the enterprise
• Participate in log analysis and filter/rule definition
• Understand technical information on security threats and vulnerability trends