Security Operations (SecOps) Engineer

Should have good knowledge and hands on experience in SIEM platforms such as Rapid7 Insight IDR, Splunk, Securonix, etc., Manages security detection rules and event sources in SIEM tool. Works with SOC team for SOAR orchestrator deployment and develop workbook for automation. Performs security analysis using security tools like EDR, MDM and ITSM tools.

Works with IT team and Cloud team for troubleshooting EDR issues, detection mechanism, policy segregation, version updates, etc., Creates incident response playbooks and executes incident response plans documenting security incidents. Performs proactive threat hunting by analysing the security alerts trends and keeping up to date with current threats via external sources.

Be able to work with AWS cloud environments and undertake WAF configurations, Security hardening, Log Analysis, etc., Manages Vulnerability assessment tools and execute scan templates, reporting templates, authentication record, policy compliance scans, etc., Be able to perform and analyse application security SAST and DAST reports.

Able to perform penetration testing of network, web applications, APIs and provide detailed report. Assists in Email analysis and have good knowledge on email security tools and configurations. Should have good knowledge on Linux, Windows operating systems and perform data validation, forensic analysis. Be able to audit and fine tune Firewall rules from security point of view Manages DLP rules, policies and alerts.

Supports audit and compliance efforts for HITRUST, SOC2 Type2, HIPAA, ISO 27001 Collaborates with IT, Cloud Ops, Operations and Application development team for implementation of security controls. Be able to use AI tools to maximize the security operations outcome and automation. Possess knowledge of AI security Qualifications Bachelor’s degree and above in Computer Science or equivalent.

2 years + experience in security operations field Security certifications like CEH is good to have. Good communication skill