Job Description :

- Excellent understanding and proven hands-on experience in SIEM/SOAR concepts such as correlation, aggregation, normalization, parsing, playbooks, layouts

- Experience with deploying and managing a large SIEM/SOAR environment

- Develop, implement, and manage execution of standard procedures for the administration, content management, change management, version/patch management, and lifecycle management of the SIEM/SOAR platforms

- Create technical documentation around the content deployed to the SIEM/SOAR

- Create/develop correlation detection rules within SIEM solution, reports and dashboards to detect emerging threats

- Strong knowledge of frameworks such as Cyber Kill Chain and Adversary Tactics, Techniques and Procedures

- Experience in using scripting languages to automate tasks in SIEM/SOAR

- Has a sound understanding of other technologies like PAM, CASB, EDR, Email Security, Secure Web gateway etc. and other threat detection platform

- Collaborate with key stakeholders within technology, application, and cyber-Security to develop specific use cases to address specific business needs

- Creation of reports, dashboards, metrics for CyberSOC administration KPIs and presentation to senior management & other stakeholders

Qualifications :

- Bachelor's degree in Computer Science, Information Security, EXTC or related field; relevant certifications (e.g., CISSP, CCSP, CompTIA Security+) are a plus

- Proven experience (4+ years) working within the Cybersecurity field, with emphasis on security platform implementation & administration

- Experience with Palo Alto XDR & Sentinel (Preferred) and/or other SIEM platforms like Splunk

- Experience with Palo Alto XSOAR(Preferred) or equivalent SOAR Platforms like Resilient, Demisto

- Proficiency in scripting languages (e.g., Python, Bash) for automation and customization of security processes is a plus

(ref:hirist.tech)

Caenix

More Information