SOC Rsa Netwitness L2/l3 - Chennai, India - NMS Consultant

NMS Consultant

Verified Company

Chennai, India

3 weeks ago

Posted by:

Deepika Kaur

beBee Recuiter

Description

Roles and Responsibilities

Monitoring and analysis of cyber security events with the use of RSA (SIEM), SOAR, PCAP, FIM/HIPS/DAM/PAM, IDS, NBAD, TIP, UEBA, antivirus and other tools.
Provide analysis and trending of security log data from a large number of heterogeneous IT security devices
Provide threat and vulnerability analysis as well as security advisory services
Analyze and respond to previously undisclosed software and hardware vulnerabilities
Investigate, document, and report on information security issues and emerging trends
Integrate and share information with other analysts and other teams
Assist Entry-Level SOC analysts to help them build stronger skills
Review SOC Analyst ticket queue, review tickets, closure or reassignment as needed
Create/review/modify documentation as needed, to include any process or procedure and thus ensure its up to date and standard
Provide analytical feedback on client network traffic patterns.
Provide analytical feedback related to malware and other network threats.
Understand information security policies and best practices in client environments.
Provide technical support within the Security Incident and Event Management team to assist in the investigation and remediation of security incidents.
Escalate incident remediation changes with other business units, vendors and customers, adhering to a predefined ITIL change management framework. This will include liaising with the Service Delivery teams and L3 engineers.
Where necessary, liaise and work with Professional Services Engineers and Solutions Architects around incident investigation and reporting.
Maintain detailed knowledge of the clients environment(s), where applicable, by maintaining and updating relevant documentation such as Network Diagrams, Configuration and Asset Databases along with process and procedural documentation.
Change management calendar updates/closures
Monthly SOC Reports
SOC White Board daily/weekly updates
Conduct security assessments regularly to identify vulnerabilities and performing risk analysis.
Document incidents to contribute to incident response and disaster recovery plans.
In the case of thirdparty vendors, verify their security strength and collaborate with them.
Escalation of incidents to be handled to L3 SOC team, when relevant.