Administrator - SIEM (SO1)

Education Qualification :
B.Sc

Skills :
Primary -> Technology | Sentinel SIEM Tool Administrator | Level 2 Support | 2 - Knowledgeable
Primary -> Technology | Securonix SIEM Tools Administrator | Level 2 Support | 2 - Knowledgeable

Certification :
Technology | Microsoft Certified: Security, Compliance, and Identity Fundamentals / CISSP/CISM/CEH/GIAC Certified Incident Handler/Certified SOC Analyst (CSA)/CompTIA Cybersecurity Analyst (CySA+)/Cisco Certified CyberOps Associate

Delivery Skills required are: -
Technical Skills: -

• Identifying and analyzing potential threats and vulnerabilities using various tools and techniques.
• Leading and managing the response to security incidents, including containment, eradication, and recovery.
• Implementing and maintaining security monitoring systems, such as SIEM (Security Information and Event Management) tools.
• Prioritizing and remediating vulnerabilities based on risk assessments.

Operational Skills: -

• Developing, implementing, and enforcing security policies, standards, and procedures.
• Managing and maintaining secure configurations for systems, networks, and applications.
• Overseeing the timely application of security patches and updates to systems and software.

Analytical Skills: -

• Analyzing logs and event data from various sources to identify patterns and anomalies.
• Utilizing advanced analytics to detect and investigate security incidents.
• Conducting digital forensics investigations to uncover evidence of security breaches.

Collaboration and Teamwork: -

• Collaborating with other IT and security teams to enhance the organization s security posture.
• Coordinating response efforts during security incidents with internal and external stakeholders.
• Leading incident response teams and ensuring effective communication and collaboration.