Job description
monitor multiple security technologies such as siem, antivirus, vulnerability management, web proxy, security patch management.
tune/create siem correlation rules.
perform in-depth incident and event analysis.
respond and handle the security incidents.
agree and align on reporting and monitoring requirements with business stakeholders.
conduct research on emerging security threats.
modify standard operating procedures (sops) and training documentation.
coach junior team members.
good knowledge on siem tools like qroc, arcsight, splunk or sentinel.
knowledge and experience with pcs, lan topologies, routers, hubs, and terminal servers
knowledge of security applications such as ids, security event management and anomaly detection tools.
knowledge of vpn technology.
knowledge of investigation tools like ftk imager, memory dump, threat analysis tools.
ability to read and interpret network diagrams.
oversight of facilitates for other offices in the uk and provide support and guidance where required.
ability to translate event analysis findings into new monitoring proposals.
remain flexible with 24/7 shift and task assignments.