Consultant - SOC - Ahmedabad, India - Dynamic Elements

    Dynamic Elements
    Dynamic Elements Ahmedabad, India

    1 week ago

    Default job background
    Description

    Implement and manage security tools, including integrating MS Defender and MS Intune for device and environment control, identifying and implementing security best practices within various Azure Cloud and CRM services, and managing modern Microsoft endpoint detection and response systems.

    Demonstrate hands-on expertise in managing and configuring Microsoft Defender for endpoint security and integrating it seamlessly with Microsoft Intune as part of the broader Microsoft Product Stack.

    Exhibit a strong grasp of Azure cloud services, focusing on their role in maintaining a secure environment.

    Understand and manage network traffic flows within the organization, extending your expertise to remote and cloud systems to fortify network defense.

    Vigilantly monitor and analyze network activity to detect and respond to potential security threats, using SIEM tools and other methods to spot anomalies that may signify a security breach.

    Investigate suspicious activities, proactively contain and prevent them, and monitor various events, triaging security alerts triggered by the monitoring system.

    Excel in incident response management, reducing the impact of security incidents by coordinating efforts with affected teams and departments. This includes conducting reverse engineering to identify the root cause of incidents and implementing permanent fixes to mitigate risks.
    Collaborate effectively with teams affected during incidents, reduce downtime, and ensure business continuity. Keep relevant stakeholders updated during and after incidents.

    Provide security services to the rest of the organization and support audit and compliance activities to maintain organizational security and compliance standards.

    Generate post-mortem reports of incidents and present them to relevant stakeholders. Develop a Knowledge and Event Database (KEDB) to track incidents and document their containment for future reference.

    Requirement


    Several years of hands-on experience in a security-related role, preferably as a security analyst or in a similar capacityProven incident response experience, including investigation, containment, and resolutionProficiency in Microsoft Defender, Intune, and other Microsoft security productsStrong knowledge of Azure cloud services and security best practicesExperience with SIEM tools for monitoring and analysisCompetence in managing modern endpoint detection and response systems.

    Deep understanding of network security principles and practices.

    Familiarity with security tools, including IDS and malware analysis toolsBachelor's degree in Computer Science, Information Security, or related field; advanced degrees preferred.

    Relevant certifications such as CISSP, CISM, CEH, and Microsoft Azure certifications are highly regarded.


    Added Advantage:
    Experience working with European companies as clients.