As an Associate Engineer working in the Security Operations Center (SOC), your primary focus will be on engineering and administering the SIEM, SOAR, Case Management, Theat Intelligence (TI) and other security platforms used by the SOC. You will be responsible for designing, implementing, and maintaining these infrastructures, as well as developing automation processes and tools to enhance SOC operations and incident response capabilities.Job&nbsp;Description<ul><li>SOC Techonology Stack - Implementation and Deployment:</li><li>- Design the architecture of the SIEM infrastructure based on organizational requirements and industry best practices.</li><li>- Configure and deploy the SIEM platform, including setting up log sources, data connectors, and collectors.</li><li>- Design and develop use cases and correlation rules to monitor and detect security incidents effectively.</li><li>- Ensure the seamless integration of the SIEM platform with other security tools, such as vulnerability scanners and threat intelligence feeds etc.</li><li>- Deploy security platforms required by the SOC.</li><li>- Conduct POCs as per the Project Requirements.</li><li>SOC Techonology Stack - Engineering and Administration:</li><li>- Maintain and fine-tune the SIEM infrastructure to ensure optimal performance and scalability.</li><li>- Collaborate with cross-functional teams to understand business requirements and translate them into SIEM use cases and rules.</li><li>- Develop and customize correlation rules, alerts, and dashboards to effectively monitor and detect security incidents.</li><li>- Manage log sources and data collection mechanisms, including log parsers, connectors, and agents.</li><li>- Perform regular maintenance, upgrades, and patches to keep the systems up to date.</li><li>Technical Support and Troubleshooting:</li><li>- Provide technical support and troubleshooting assistance for the SIEM platform and related systems.</li><li>- Collaborate with vendors and support teams to resolve technical issues and ensure optimal performance.</li><li>- Investigate and resolve issues related to log sources, data collection, and data quality within the SIEM platform.</li><li>- Troubleshoot and rectify any issues that occur within the technology stack</li><li>- Provide technical support to internal/external teams to enhance security in the IT infrastructure.</li><li>Process Automation and Optimization:</li><li>- Identify opportunities for process automation within the SOC, including incident triaging, alert enrichment, and response workflows.</li><li>- Develop scripts, workflows, or tools to automate repetitive tasks and improve operational efficiency.</li><li>- Streamline incident response procedures by creating playbooks and workflows that leverage automation capabilities.</li><li>- Continuously evaluate and enhance SOC processes to align with industry best practices and improve incident response times.</li><li>SOC Teachonology Stack - Content Development and Maintenance:</li><li>- Create and maintain SIEM content, including parsers, rules, reports, and dashboards.</li><li>- Regularly review and update SIEM content based on emerging threats, vulnerabilities, and new log sources.</li><li>- Collaborate with threat intelligence teams to incorporate actionable intelligence into the SIEM platform.</li><li>- Conduct testing and validation of new SIEM content to ensure accuracy and effectiveness.</li><li>Documentation, Knowledge Transfer, Security Awareness and Training:</li><li>- Conduct training sessions and knowledge sharing activities to educate SOC personnel on SIEM engineering, administration, automation techniques, SIEM usage, configuration, and best practices.</li><li>- Collaborate with the security awareness team to develop and deliver training materials for SOC analysts related to SIEM usage and best practices.</li><li>- Collaborate with the security awareness team to develop training materials and deliver sessions for Security Engineers on SIEM implementation and deployment, configuration and administration.</li><li>- Create detailed documentation of the SIEM implementation, configuration, and deployment procedures.</li><li>- Create Technical proposals.</li><li>- Review and comprise RFPs sent by clients.</li></ul>Person&nbsp;Specification<ul><li>Bachelor's degree in Computer Science, Information Security.</li><li>01+ years of industry experience.</li><li>Professional certifications related to SIEM Administration and Deployment.</li><li>Experience with the AWS and Azure cloud technology stack.</li><li>Strong understanding of Kusto Query Language (KQL)</li><li>Experience in SIEM engineering, administration, and content development, preferably with Microsoft Sentinel, FortiSIEM, and ELK Stack etc.</li><li>Proficiency in scripting languages (e.g., Python, PowerShell, Bash, Ansible, Terraform) to develop automation workflows and tools.</li><li>In-depth knowledge of log management, log analysis, and security event correlation concepts.</li><li>Familiarity with security technologies and tools, including firewalls, intrusion detection/prevention systems (IDS/IPS), endpoint protection, active directory and network monitoring solutions etc.</li><li>Strong knowledge of networking protocols, systems architecture, and security frameworks.</li><li>Experience with incident response processes and methodologies.</li><li>Excellent problem-solving, analytical thinking and troubleshooting skills.</li><li>Strong communication and collaboration skills to work effectively within cross-functional teams.</li><li>Candidate Should have one or more of following Microsoft certifications SC-200, MS-500, AZ-500, and SC-100.</li></ul>

Associate Engineer - Security Operations Center (SOC)

jobpost

<ul><li>Service existing accounts and projects and maintain a good customer relationship</li><li>Ability to identify, follow up on leads, promote products and services portfolio and bring in new businesses</li><li>Experience in project costing, budgeting, and pricing strategies</li><li>Be conversant with telecommunication and ICT products and services</li><li>Follow up with customers and resolve customer complaints by investigating problems and developing solutions</li><li>Preparing quotations and exposure to tender processes.</li><li>Review sales contracts, sales administration, and vendor management</li><li>Contribute to team effort by accomplishing related results as needed</li><li>Assess competitors by analyzing and summarizing information and trends</li><li>Develops sales opportunities by researching and identifying potential accounts, soliciting new accounts, building rapport, providing technical information and explanations</li></ul> Person Specification<ul><li>Bachelors degree in a relevant curriculum</li><li>Minimum 04 years sales experience/ customer relationship management</li><li>Basic financial knowledge</li><li>Conversant with legal contracts &amp;&nbsp;familiarity with ICT service offerings</li><li>Excellent presentation skills and professional appearance</li><li>Strong interpersonal and communication skills</li></ul>

Associate Manager - Telco & Media

Job Description<ul><li>Act as the first point of contact for the CEO with internal and external clients</li><li>Handle incoming requests and queries appropriately</li><li>Manage the CEOs diary, schedule meetings and appointments, and provide reminders</li><li>Book and manage complex travel arrangements</li><li>Develop and maintain an efficient documentation and filing system</li><li>Produce reports, presentations, and briefs as needed</li></ul>Job Specification<ul><li>At least 3 years of experience as a Personal Assistant to a senior executive</li><li>Comprehensive understanding of office management systems and applications</li><li>Exceptional planning and time management skills</li><li>Excellent verbal and written communication skills</li><li>Discretion and confidentiality</li><li>A qualification as a PA is advantageous</li></ul>Kindly note that this job is for a fixed term period of 06 months

Personal Assistant

Job Description<ul><li>Perform detailed analysis of security incidents, including malware analysis, endpoint forensics, and network traffic analysis, to identify root causes and appropriate remediation actions.</li><li>Collaborate with the team and other stakeholders to escalate incidents when necessary and coordinate responses to complex security events.</li><li>Analyzing threat intelligence feeds and reports to understand evolving threats, attack patterns, and tactics used by threat actors.</li><li>Prepare reports of incident analysis to provide briefings to management and clients.</li><li>Serve as a technical point of escalation and provide mentoring for L1 Security Operations Center (SOC) analysts.</li><li>Maintain familiarity with industry trends and security best practices.</li><li>Building strong relationships with new clients, while maintaining existing client relationships.</li><li>Perform other related duties, as assigned or requested.</li></ul> Person&nbsp;Specification&nbsp;<ul><li>Minimum of 3-5 years of experience in a security-related role, preferably in Banking and Financial sector.</li><li>Bachelors degree in Cyber Security, IT or related field.</li><li>CPIA,BTLO,CEH/CHFI, ECSA or relevant Security Analyst Training / Certification.</li><li>Understanding of Security technologies of on premise and cloud infrastructure.</li><li>Scripting and automation (Python, Shell etc.).</li><li>The ability to adapt quickly to new technologies and emerging threats, coupled with critical thinking skills to identify and address security risks effectively.</li><li>Demonstrate strong interpersonal skills with ability to engage effectively across various levels of management, staff and clients.</li></ul>

SOC Analyst - Level 2

<ul><li>Service existing accounts and projects and maintain a good customer relationship</li><li>Experience in project costing, budgeting, and pricing strategies</li><li>Be conversant with telecommunication and ICT products and services</li><li>Follow up with customers and resolve customer complaints by investigating problems and developing solutions</li><li>Prepare quotations and exposure to tender processes</li><li>Review sales contracts, sales administration, and vendor management</li></ul>Person&nbsp;Specification<ul><li>Bachelors degree or equivalent qualification</li><li>02+ years experience in similar capacity</li><li>Excellent presentation skills and professional appearance</li><li>Strong interpersonal and communication skills</li><li>Basic financial knowledge</li><li>Conversant with legal contracts &amp; familiarity with ICT service offerings</li></ul>

Executive - Commercial

<ul><li>SOC Technology Stack - Implementation and Deployment:</li><li class="ql-indent-1">Design the architecture of the SIEM infrastructure based on organizational requirements and industry best practices.</li><li class="ql-indent-1">Configure and deploy the SIEM platform, including setting up log sources, data connectors, and collectors.</li><li class="ql-indent-1">Design and develop use cases and correlation rules to monitor and detect security incidents effectively.</li><li class="ql-indent-1">Ensure the seamless integration of the SIEM platform with other security tools, such as vulnerability scanners and threat intelligence feeds etc.</li><li class="ql-indent-1">Deploy security platforms required by the SOC.</li><li class="ql-indent-1">Conduct POCs as per the Project Requirements.</li><li>SOC Technology Stack - Engineering and Administration:</li><li class="ql-indent-1">Maintain and fine-tune the SIEM infrastructure to ensure optimal performance and scalability.</li><li class="ql-indent-1">Collaborate with cross-functional teams to understand business requirements and translate them into SIEM use cases and rules.</li><li class="ql-indent-1">Develop and customize correlation rules, alerts, and dashboards to effectively monitor and detect security incidents.</li><li class="ql-indent-1">Manage log sources and data collection mechanisms, including log parsers, connectors, and agents.</li><li class="ql-indent-1">Perform regular maintenance, upgrades, and patches to keep the systems up to date.</li><li>Technical Support and Troubleshooting:</li><li class="ql-indent-1">Provide technical support and troubleshooting assistance for the SIEM platform and related systems.</li><li class="ql-indent-1">Collaborate with vendors and support teams to resolve technical issues and ensure optimal performance.</li><li class="ql-indent-1">Investigate and resolve issues related to log sources, data collection, and data quality within the SIEM platform.</li><li class="ql-indent-1">Troubleshoot and rectify any issues that occur within the technology stack</li><li class="ql-indent-1">Provide technical support to internal/external teams to enhance security in the IT infrastructure.</li><li>Process Automation and Optimization:</li><li class="ql-indent-1">Identify opportunities for process automation within the SOC, including incident triaging, alert enrichment, and response workflows.</li><li class="ql-indent-1">Develop scripts, workflows, or tools to automate repetitive tasks and improve operational efficiency.</li><li class="ql-indent-1">Streamline incident response procedures by creating playbooks and workflows that leverage automation capabilities.</li><li class="ql-indent-1">Continuously evaluate and enhance SOC processes to align with industry best practices and improve incident response times.</li><li>SOC Technology Stack - Content Development and Maintenance:</li><li class="ql-indent-1">Create and maintain SIEM content, including parsers, rules, reports, and dashboards.</li><li class="ql-indent-1">Regularly review and update SIEM content based on emerging threats, vulnerabilities, and new log sources.</li><li class="ql-indent-1">Collaborate with threat intelligence teams to incorporate actionable intelligence into the SIEM platform.</li><li class="ql-indent-1">Conduct testing and validation of new SIEM content to ensure accuracy and effectiveness.</li><li class="ql-indent-1">Conduct training sessions and knowledge sharing activities to educate SOC personnel on SIEM engineering, administration, automation techniques, SIEM usage, configuration, and best practices.</li><li class="ql-indent-1">Collaborate with the security awareness team to develop and deliver training materials for SOC analysts related to SIEM usage and best practices.</li><li class="ql-indent-1">Collaborate with the security awareness team to develop training materials and deliver sessions for Security Engineers on SIEM implementation and deployment, configuration, and administration.</li><li class="ql-indent-1">Create detailed documentation of the SIEM implementation, configuration, and deployment procedures.</li></ul>Person&nbsp;Specification<ul><li>Bachelors degree in Computer Science, Information Security.</li><li>Professional certifications related to SIEM Administration and Deployment.</li><li>Experience with the AWS and Azure cloud technology stack.</li><li>Strong experience in SIEM engineering, administration, and content development, preferably with industry leading SIEM platforms such as Splunk, QRadar, LogRhythm, Microsoft Sentinel, FortiSIEM etc.</li><li>Proficiency in scripting languages (e.g., Python, PowerShell, Bash, Ansible, Terraform) to develop automation workflows and tools.</li><li>In-depth knowledge of log management, log analysis, and security event correlation concepts.</li><li>Familiarity with security technologies and tools, including firewalls, intrusion detection/prevention systems (IDS/IPS), endpoint protection, active directory, and network monitoring solutions etc.</li><li>Strong knowledge of networking protocols, systems architecture, and security frameworks.</li><li>Experience with incident response processes and methodologies.</li><li>Excellent problem-solving, analytical thinking and troubleshooting skills.</li><li>Strong communication and collaboration skills to work effectively within cross-functional teams.</li><li>2-3 years' relevant work experience.</li></ul>

Senior Engineer - Platform Security - SOC

Job Description<ul><li>Providing technical support and assistance to end-users, resolving hardware, software, and network-related issues promptly and effectively</li><li>Troubleshooting and diagnosing IT problems, identifying root causes, and implementing solutions to minimize downtime and disruptions</li><li>Installing, configuring, and maintaining computer systems, software, and peripherals to ensure optimal performance and security</li><li>Assisting with the setup and deployment of new devices, including computers, printers, and mobile devices</li><li>Managing user accounts and access permissions, ensuring data security and compliance with company policies</li><li>Responding to IT support tickets and inquiries via various channels, such as email, phone, or ticketing systems, and documenting solutions and resolutions</li><li>Monitoring and maintaining IT inventory, including hardware and software licenses, and assisting with procurement as needed</li><li>Assist end-users with network connectivity and internet-related issues</li><li>Collaborate with Product experts and escalate L2 and L3 support when needed</li><li>Facilitate the documentation support requests, resolution, and system configurations</li></ul>Person Specification<ul><li>Completed/ following a Bachelor's degree in Information Technology or a related field</li><li>Enthusiasm in helpdesk or technical support</li><li>Experience in Windows OS and Other OS</li><li>Have a good interpersonal and communication skills</li><li>Network, Security and Microsoft Certifications</li></ul>

Intern - Digital Infrastructure

Job Description<ul><li>Plan and manage medium to large scale projects from start to finish.</li><li>Responsible for the overall delivery of projects ensuring smooth resource planning and management across various projects for the respective sub-portfolio assigned if any.</li><li>Adhere to the PM methodology with standards for governance, documentation, and data.</li><li>Track progress towards project goals and provide status updates regularly to all internal and external stakeholders.</li><li>Implement project activities by resourcing, scheduling, prioritisation and task coordination as per the project management plan.</li><li>Liaise with customers, internal stakeholders and principals to address needs, concerns, and expectations of the stakeholders in planning and executing the project.</li><li>Establish, maintain and carry out communication with all internal and external stakeholders in an effective and collaborative manner.</li><li>Identify, maintain and provide mitigation/action plan for project risks and issues.</li><li>Evaluate and monitor schedules, budgets and other project activities.</li><li>Update domain knowledge through available opportunities.</li><li>Provide inputs to improve existing project management practice in the organization.</li><li>Identify opportunities for continuous improvement.</li></ul>﻿Person Specification<ul><li>Degree or diploma or equivalent qualification in a relevant field.</li><li>PMP Certification or PRINCE2 is required .</li><li>Minimum 05 years of experience in a project management role managing complex projects &amp; programs﻿.</li><li>Minimum 02 to 03 years of experience in handling Software Development projects with exposure to Agile Methodologies.</li></ul>

Project Manager (Software Domain)

Job&nbsp;Description<ul><li>Overseeing the incident management process and team members involved in resolving the incident.</li><li>Responding to a reported service incident, identifying the cause, and initiating the incident management process.</li><li>Prioritizing incidents according to their urgency and influence on the business.</li><li>Producing documents that outline incident protocols such as how to handle cybersecurity threats or how to correct server failures.</li><li>Collaborating with the incident management team to ensure that all protocols are diligently followed.</li><li>Logging all incidents and their resolution to see if there are recurring malfunctions.</li><li>Adjusting the incident management process as required to ensure its effectiveness.</li><li>Communicating with upper management if major issues are found in the IT system.</li><li>Managing the incident team members by re-assigning workloads and re-scheduling non-urgent tasks.</li><li>Should be able to communicate clearly with stakeholders and should be able to identify their requirements (related to incidents and process improvements) clearly to provide solid solutions.</li><li>Ability to identify value added services depending on customer environment.</li><li>Ability to audit customer Incident management process &amp; suggest / implement process improvements &amp; optimizations.</li><li>Ability to conduct training sessions to other engineers &amp; incident managers to up skill them &amp; to refresh process awareness.</li><li>Ability to learn and quickly adopting into new technologies.</li><li>Collaborate with other engineers and get the required domain knowledge to support multiple systems with related to delivering incident management service to them.</li><li>Mentoring junior team members and assisting them to groom up.</li></ul>﻿Person Specification<ul><li>Education Bachelor's Degree in Computing, IT or related field ITIL v3 or v4 certification.</li><li>Excellent knowledge in IT service management.</li><li>Ability to work under tight schedules.</li><li>Excellent managerial skills and ability to collaborate with team members.</li><li>Ability to analyze a high volume of technical data and work in a fast-paced environment.</li><li>Strong problem solving, analytical, and time management skills.</li><li>Effective communication skills.</li><li>Experience At least three years experience working in IT service management, or a similar role.</li></ul>

Consultant - Incident Management

<ul><li>Degree related to Engineering</li><li>Professional certifications in the area of cyber security is an added advantage </li><li>Strong leadership skills&nbsp;</li><li>Excellent communicator, team player, and a person capable of translating plans into action</li><li>Involvement in security solutions design, implementation, and support</li><li>Experience in above for mid and large customers</li><li>Prior&nbsp;experience&nbsp;in managing a team</li></ul> <ul><li>Evaluate and select security solutions which caters customer business requirements</li><li>Build technical skills within the team to support the lifecycle of the new and existing solutions</li><li>Present the security solutions to the customers and support sales team to formulate winning strategies for the solutions.</li><li>Carry out Proof of Concept (POC) and R &amp; D for security solutions and related sub systems.</li><li>Develop and maintain healthy relationships with internal teams, customers, and principles.</li><li>Providing technical support for existing security solutions and maintain the SLAs</li><li>Undertake any other related tasks as assigned by the team lead.</li></ul>