Security Operations Center Engineer - SIEM (2-5 Yrs) Pune (Others)

Scope of work: - Ensure that IT services are available for use when users need them.
-Protect FCI electronic data, by keeping it secure and safe from unauthorized access.
-Ensure that preventative maintenance activities are performed to keep everything fit and healthy.
-Ensure that hardware and applications software remains current and in supported versions.
-Provide solutions that enable FCI users to access the IT systems in a flexible and secure way.
-Ensure that alternative solutions are available in the event of disasters.
-Work with our colleagues to design and develop solutions that add value to FCIs core business functions.
-Provide help, advice, and support in the use of all centrally maintained IT services. Requirement : - SIEM ( Splunk, McAfee System management and troubleshooting and threat analytics ) - Experience in Information Security monitoring using SIEM / Vulnerability Management tool - Log Sources configuration rules dashboard creation - Vulnerability /Threat detection and management - Deployment and administration of proxy and content filtering. Intrusion prevention system, Web application firewall, McAfee Antivirus.
-Ability to utilize Intrusion Detection System ( Palo Alto ), Threat Prevention System ( Fire eye), Secure Gateway (McAfee) and other toolsets to identify and triage anomalies.
-Provide internal categorization of the events and assign to Incident handlers - Working knowledge intrusion monitoring, cyber situational awareness and reporting of suspicious events.
-Create custom IDS/IPS signatures based on new threats and adversary tactics . Techniques and procedures.
-MS ATA threat analysis and remediation If interested please apply here.

Required Skills : English