JOB DESCRIPTION:§ Perform training and development of team members.§ Create and review operational documents§ Create necessary reports for clients§ Monitor performance of team members§ Create training materials for the team.§ Create security incident playbooks and workflows§ Provide first line supervision to direct reports§ Develop and administer SOC processes and review their application to ensure that SOC’s controls, policies, and procedures are operating effectively§ Provide management oversight for the identification, triage and response of events or incidents of apparent security breaches§ Produce and review aggregated performance metrics§ Manage and increase the effectiveness and efficiency of the SOC, through improvements to each function as well as coordination and communication between support and business functions§ Play a significant role in long-term SOC strategy and planning, including initiatives geared toward operational excellence§ Act as owner of the managed security service and provide internal escalation for your team members.§ Work collaboratively with our client services organization, security service advisors, professional services, sales and any other teams involved in delivery of the SOC service.§ Contribute to pursuing cohesion, performance, and leadership as well as service improvement. With regular and ongoing governance of service delivery including reporting, analysis, recommendations for improvements and follow-up, you will nurture working relationships with customers and key stakeholders.§ Constantly review existing methods and approaches, addressing any communication or process gaps.§ Help manage operations focused programs such as training, client advocacy, transition to operations, change management and knowledge transfer, and will drive new areas for improvement.Shall be willing to be assigned to a project as Security Consultant, SOC Analyst or as SOC Supervisor (depends on the Project Requirement/Business Requirement).Shall be able to perform at least the following: § Assign incidents to analysts§ Manage and monitor the performance of SOC team members§ Track incident handling by KPIs (using the dashboard), threat types, and levels§ Monitor all tasks performed by the analyst / senior analyst§ Review assigned incidents by severity.§ Investigate the incident using the following tools:o Network Forensicso Endpoint Forensicso File Analysiso Online Web searcho Search Alertso Search Incidents § Add evidence and observations to the incident findings and workflow.§ Respond to incidents as follows:o Mark as actionable intelligence.o Manually create rules based on investigation outcome.o Escalate to a higher-level analyst or SOC manager/CISO (if required) by changing the incident status.§ Update incident status/severity.§ Launch proactive investigations using the solution’s investigation tools (typically by senior analysts).§ Open new incidents based on evidence and investigation findings.§ Set alert action rules to optimize the investigation process and reflect priorities (Intelligence module). Job Qualifications:· BS degree in Information Technology or relevant field.· Proven work experience as IT Security Supervisor/Manager· Excellent communication and written skills· Knowledge with various IT Security Solutions
