Should have an understanding of TCP, UDP, Packet analysis, Threat and malware analysis, attack lifecycle.
Should be able to conceptually understand the attack kill chain.
Should be able to review and understand MIS reports shared by Network and Security
Should have a knowledge, understanding of the Microsegmentation concept and
As a part of security domain compliance management and should be able to manage compliance for network and security appliances(Firewalls, VPN, Anti-APT, Microsegmentation)
Should be able to handle Incidents and events end to end, from triggering of an incident, managing SLAs to closure of an incident, providing CAPA and RCA.
Should be able to understand the RACI matrix for each of the domains.
Should be able to prioritize tasks while processing advisories, incidents, problems and events.
Work with the 3rd party vendors for POCs, UATs and solution deployment purpose.
License, certificate life-cycle, upgrade-update management for the depicted domains.
Prepare SOPs and policies required for the depicted domains.
Be a bridge between the technical and the management team and make sure updates are regularly submitted to higher management and review to the technical team.
Any earlier experience in crisis situation handling would be an added advantage.
