SOC Admin L1

SOC Admin

Responsibilities

. SIEM QRadar Administrator

• . Maintenance of Qradar platform
• . Integrate log sources with SIEM solution for SOC monitoring.
• . Upgrade or update the Qradar.
• . Maintain the Data Retention.
• . Work onSIEM Support cases
• . Add-on if have good knowledge in python
• . Should have parser development knowledge
• . Good to have knowledge in other SIEM technologies like Splunk, Securonix etc.
• . Build and continuously improve SOC analytics framework
• . Ensure effective designing and implementation of SIEM content filters, rules, expressions and other identification mechanisms of the threat and vulnerability management technologies used within the SOC.
• . Mentor and guide the First Level Security Analysts
• . Provides professional data analysis within the SOC processes and to SOC customers in order to drive further security measures and risk mitigation activities
• . Responsible for execution and maintenance of SOC related analytical processes and tasks execution Detailed technical security reporting to Management operating companies and appropriate stakeholders
• . Work closely with other Information Security teams to ensure effective intrusion detection and incident response
• . Continually maintain and improve technical capabilities through individual development activities accreditations and certifications to remain constantly prepared to challenge the ever evolving cyber threat
• Location: Pune