Cyber Sec_Firewall_SOC/SIEM_VAPT Experts

Job Description:

• Cisco Firewall JD
• Strong expertise in
• Cisco ASA 5500 5500 X series
• Cisco Firepower Threat Defense FTD
• Cisco FMC Firepower Management Center
• Hands on experience with
• NAT Static Dynamic PAT
• ACLs and security zones
• TCP IP routing BGP OSPF basics switching
• Deep understanding of
• Firewall policies and rule lifecycle
• VPN technologies IPsec SSL VPN
• Experience with troubleshooting tools packet capture logs debugs
• Familiarity with Snort IPS URL filtering malware protection
• Experience with SIEM tools Splunk QRadar Sentinel is a plus
• Knowledge of networking concepts and protocols
• Preferred Skills
• Cisco certifications like
• o CCNA CCNP Security
• o Cisco Firepower certifications
• Experience in cloud security Azure AWS firewall integration
• Basic scripting Python Ansible for automation
• Understanding of compliance frameworks ISO 27001 NIST etc
• Infra VM JD
• Web Mobile API Network Cloud VAPT
• OWASP Top 10 SANS 25 secure SDLC
• Tools Burp Suite Nmap Nessus Metasploit OWASP ZAP Frida Objection
• Security reporting risk ratings remediation guidance
• Exposure to SIEM tools and basic AWS security

Key Responsibilities:

• SOC
• At least experience in Information Security operations management with hand on experience in large security operations center using IBM QRadar Splunk ArcSight or similar SIEM tool
• Manage network endpoints and forensics initiatives malware triage and cyber security incident response
• Managing Cyber Security Services engagements and engagement teams
• Recognizing common attacker tools tactics and procedures
• Providing oversight for on site examinations and collections and technology advisory services to enhance forensic client engagements
• Researching and developing new digital forensics scripts tools and methodologies
• Assessing and troubleshooting a variety of technical issues and support a cyber response lab on our clients SIEM tool and UEBA platform
• Assist in conducting peer reviews and providing quality assurance reviews for junior personnel and will support the mentoring of junior incident
• managers and provide guidance to others on incident management prioritization triage and report writing in support of onsite engagements
• Guiding the team to Monitor identify and investigate the security alerts and perform incident response activities related to cybersecurity incidents
• Creates new trouble tickets for alerts that signal an incident and require Tier 2 Incident Response review
• Respond to cybersecurity incidents conduct threat analysis as directed and address detected incidents for resolution
• Should be able do multitasking to coordinate incident with Sr analyst and escalation manager
• Recommend enhancements to SOC security process Operations efficiencies
• Create Incident response IR plan IR play books manage all incidents and crisis situations
• Log Analysis handle resolve security incidents
• Collaborate with respective tracks technical team for remediation of the incident
• Periodical review of incident response plan and procedures
• Recommend and document specific countermeasures and mitigating controls
• Develop comprehensive and accurate reports and presentations for both technical and executive audiences
• Preferred Skills
• Strong knowledge of cyber attacks and techniques Cyber Kill chain incident management best practices
• A high level understanding of multi tiered applications and various network and security devices protocols
• Knowledge of various operating system flavors including but not limited to Windows Linux Unix
• Proficient in preparation of reports and documentation

Preferred Skills:

Technology->Digital Experience Platforms->Digital Experience - Vulnerability Management->Google Cloud Security Scanner,Technology->GRC Automation->GRC Tool implementation & maintenance->Servicenow GRC,Technology->Infrastructure Security->SOC Operations,Vulnerability Management