Information Security Engineer

Position Summary:

Security operations team is responsible for ensure that the Confidentiality, Integrity, and availability of the organization is always protected. The person working in L2 SOC team operates the security monitoring solutions, reacting timely to security events as identified. In this role, individual is expected to manage and configure security tools, manage security incidents, implementing proactive security measures, identifying, and analyzing potential security threats and vulnerabilities. This role requires working in shift

Job Functions and Responsibilities:

• Develop and enhance SIEM rules, use-cases, log source integration, log parsing, queries, dashboards, channels and custom rules.
• Provide support to configure, analyze, and remediate issues on the SIEM.
• Investigate suspicious activities, contain, and prevent them. Correlate and validate alerts. Analyze these events within the network environment of the business, and coordinate response activities with key staff in real time
• Monitor security alerts and events from various sources to identify potential threats and security incidents.
• Analyze security data and logs to detect unauthorized access, malware infections, and other suspicious activities.
• Lead or assist in responding to security incidents, coordinating efforts to contain and mitigate the impact.
• Implement, configure, and manage end point and network security solutions. 
• Analysis of phishing emails reported by internal end users.
• Escalation of incidents to be handled to L3/ Leads, when relevant.
• Follow up on remediation activities
• Triage on general information security tickets.
• Stay current with emerging security threats, vulnerabilities, and attack techniques. Utilize threat intelligence sources to proactively identify potential risks.
• Bachelor’s degree from an accredited college / university with basic knowledge of Information Security. 
• Familiarity with security technologies, including firewalls, EDR, antivirus , Email Security and Deception 
• Keen to learn the security technologies and how security operates.
• Reliability and overall good communication skills.
• Well-developed logical thinking capabilities, to be able to investigate cases.
• Able to work in shift and weekend.

Qualifications:

• 4-5 years of progressive experience in SIEM Implementation/Administration, Alert Monitoring and Incident Management.

WORK SCHEDULE OR TRAVEL REQUIREMENTS 

2 PM to 11 PM / 10 PM to 7 AM IST. No travel.