DAILY ACTIVITIES:

? Monitor, respond to, and analyse SIEM alerts from monitoring tools.

? Provide technical guidance and recommendations to clients to enhance their overall security

posture within the managed products. Handles daily incidents; monitors, tracks, analyzes and

records.

? Work with vendors, outside consultants, and other third parties to improve information security

within the organization.

? Responds to security-related tickets escalated from clients and works collaboratively with the

client to assist in resolving security events.

? Work with other IT professionals to resolve fast-moving vulnerabilities such as spam, virus,

spyware and malware.

? Monitor security vulnerability information from vendors and third parties.

? Create Weekly and Monthly Status Reports, including daily technical task reports and contract

deliverables.

SKILLS:

? Strong written, verbal and non-verbal communication skills, especially conveying complex

information in an understandable manner.

SIEM TOOLS are a MUST

? A minimum of 2-4 years of experience working with Microsoft Active Directory.

? Analyze and resolve complex technical and business problems.

? Must have proficient knowledge of three or more of the following technologies: Application /

stateful / UTM firewalls; SIEM; DLP; Web content filtering; Web application firewalls (WAF);

Vulnerability scanning and penetration testing; IPS/IDS; Security Operations Center operations;

Wireless Networking; UNIX, AIX & Solaris, Linux and Windows Server Operating Systems; Endpoint

and Malware

? Knowledge of Windows 2003–12 server platforms.

? Working knowledge of analyzing IIS, SQL, firewall, IPS/IDS, and Windows.

? Web and mail-logged events.

? Ability to analyze IANA-assigned ports (well-known, registered, dynamic, and private ports).

? Ability to troubleshoot common network devices, network vulnerabilities and network attacks

patterns.

? Ability to troubleshoot Windows Event IDs.

? Interact with all levels of management.

? Make decisions based on many variables.

? Manage multiple tasks/projects simultaneously.

? Minimum of Bachelor's Degree in computer science, telecommunications management, or electrical

engineering, or a related field, or have 4 years of experience.

Must have

• Previous Experience equal to 2 years minimum with SIEM tools in a SOC
• On-site availability
• English-level Fluent
• Strong Network and Cybersecurity Knowledge