Job Description

Overview

Experience: - 3-6 Years as Security Administrator & Information Security Domain.

Tools: - Crowdstrike, Zscaler,, DLP, SIEM, & Python Scripting for automation

Skill Set: -

Should have good knowledge on: -

Endpoint Security

Web Filtering & proxy

Cloud Security

Email Security

SIEM & SOAR

Network Detection & Response

DLP Admin

Python Scripting & Automation

Responsibilities

• Develop detection rules to support our SOC’s alerting and response capabilities.
• Provide expert analytic investigative support to analysts for complex security incidents.
• Implement and execute administrative, management, and lifecycle procedures for the SIEM.
• Review security controls measures, identify gaps in the security architecture, and implement improvements or enhancements as needed.
• Implement email security standards such as DKIM, SPF and DMARC.
• Demonstrated experience with deploying and operating network security tools, including but not limited to Antivirus, IDS, firewalls, proxies and security gateways.
• Evaluates system security configurations to ensure efficacy and compliance with policies and procedures.
• Researches and investigates the potential impact of new threats and exploits and recommends solutions to management.
• Provides guidance on risks, vulnerabilities, or potential vulnerabilities within the architecture.
• Deploy, configure, and maintain Data Loss Prevention (DLP) tools and solutions across enterprise systems.
• Automate administrative tasks, reporting, and data processing using Python scripts and applications.
• Excellent communication skills both written and verbal include the capacity to communicate complex and technical issues.

Certification: CEH, CISSP