Job Description

It's fun to work in a company where people truly BELIEVE in what they are doing!

We're committed to bringing passion and customer focus to the business.

Position Objective

(The purpose of role in current business/market scenario)

• We are seeking passionate cyber security professionals for our 24/7 security operations team, who will provide support to Halma Group’s centralized infrastructure.
• Perform real time monitoring on malicious activities, analyse logs looking for attack patterns to ensure infiltration attempts are identified and dealt in a timely manner
• He/she will be responsible for managing technical support requests pertaining to Security devices integrated in Halma’s infrastructure.
• Provide first line of support for Halma and its subsidiary company infrastructure security.

Responsibilities (KRAs / deliverables / job expectations)

• Perform real time security monitoring and incident response activities across the networks, leveraging a variety of tools and techniques
• Create and improve Incident Response Playbook
• Perform post incident reviews to improve and tune Halma’s incident response capability
• Provide support to the team members while investigating alerts escalated by MSSP & work closely with Leads.
• Provide support in the area of Azure Active directory, Intune (conditional access/MDM), single sign on and Multifactor Authentication, Microsoft Defender for Endpoint, Microsoft Defender for Server, Office 365 email security.
• Monitor and respond to security incidents for Halma PLC and Subsidiary companies. Interact with end-users and IT Managers of Halma and Subsidiary companies during investigations, to raise awareness and training opportunities.
• Create and Maintain KB articles & SOPs for all the applications related to SOC to ensure security best practices in the team.
• Should be able to work on Incident and Security Reports Independently.

Critical Success factors (critical / high impact aspects of role)

• Successfully resolve security incidents, infrastructure support & service requests within SLA.
• Contribute to improving processes, systems and services provided by Halma IT.
• Identification of Security Risks and threats to the Group.
• Cyber security mindset is key and taking appropriate action on any cyber incident is the major aspect of this role.

Academic qualification

• Bachelor’s in computer science/IT
• Preferred Certifications: CompTIA Security+, CEH Microsoft Security certifications like SC-200/SC-300/SC-400
• Desirable Certifications: any SIEM certifications, any Network certifications

Experience (exposure)

• Total experience 2-3 years
• Exposure to security technologies including Incident Response, Microsoft Defender, Azure Sentinel.
• Knowledge of network fundamentals TCP/IP, SSL/TLS, DNS, DHCP.
• Hands on experience to Microsoft technologies like 365 ATP Defender, Endpoint Manager (Intune- conditional access/MDM/MAM) and KQL knowledge.
• Any vendor firewall and Remote Access solutions.
• Good to have – Cato Networks (VPN and Firewall), Azure Active Directory, Data leak prevention technologies.

Key attributes (critical functional competencies)

• High integrity
• Diligent
• Honesty
• Great communication
• Great Team Player

Competencies (fundamental skills and attitudes)

• Good documentation skills
• Good written and spoken English is a must
• Excellent problem-solving skills
• Effective communication with business stakeholders
• Broad range of technical skills, with a focus on Security and Risk
• Must be willing to mentor other Team members to grow as a team.

If you like wild growth and working with happy, enthusiastic over-achievers, you'll enjoy your career with us!

Not the right fit?Let us know you're interested in a future opportunity by clicking Introduce Yourself in the top-right corner of the page or create an account to set up email alerts as new job postings become available that meet your interest!