Cyber Sec_Firewall_SOC/SIEM_VAPT Experts

Strong expertise in:

Cisco ASA (5500/5500-X series)

Cisco Firepower Threat Defense (FTD)

Cisco FMC (Firepower Management Center)

Hands-on experience with:

NAT (Static, Dynamic, PAT)

ACLs and security zones

TCP/IP, routing (BGP, OSPF basics), switching

Deep understanding of:

Firewall policies and rule lifecycle

VPN technologies (IPsec, SSL VPN)

Experience with troubleshooting tools (packet capture, logs, debugs).

Familiarity with Snort IPS, URL filtering, malware protection.

________________________________________

o CCNA / CCNP Security

o Cisco Firepower certifications

Infra VM JD

SOC

At least  experience in Information Security operations & management with hand on experience in large security operations center using IBM QRadar/Splunk/ArcSight or similar SIEM tool.

Manage network, endpoints and forensics initiatives, malware triage and cyber security incident response

Managing Cyber Security Services engagements and engagement teams

Recognizing common attacker tools, tactics, and procedures

Providing oversight for on-site examinations and collections and technology advisory services to enhance forensic client engagements

Researching and developing new digital forensics scripts, tools, and methodologies

Assessing and troubleshooting a variety of technical issues and support a cyber response lab on our clients SIEM tool and UEBA platform

Assist in conducting peer reviews and providing quality assurance reviews for junior personnel and will support the mentoring of junior incident

managers and provide guidance to others on incident management prioritization, triage and report writing in support of onsite engagements.

Guiding the team to Monitor, identify and investigate the security alerts and perform incident response activities related to cybersecurity incidents

Creates new trouble tickets for alerts that signal an incident and require Tier 2 / Incident Response review

Respond to cybersecurity incidents, conduct threat analysis as directed and address detected incidents for resolution

Should be able do multitasking to coordinate incident with Sr analyst and escalation manager

Recommend enhancements to SOC security process, Operations efficiencies.

Create Incident response (IR) plan, IR play books, manage all incidents and crisis situations.

Log Analysis, handle, resolve security incidents.

Collaborate with respective tracks/technical team for remediation of the incident.

Periodical review of incident response plan and procedures.

Recommend and document specific countermeasures and mitigating controls

Develop comprehensive and accurate reports and presentations for both technical and executive audiences

Strong knowledge of cyber-attacks and techniques, Cyber Kill chain, incident management best practices.

A high-level understanding of multi-tiered applications and various network and security devices/protocols

Knowledge of various operating system flavors including but not limited to Windows, Linux, Unix

Proficient in preparation of reports and documentation.

Educational requirements

MCA,Intergrated course BCA+MCA,Bachelor of Engineering,BCA,BSc

Application Security,Application Security->Burpsuite,Application Security->Devsecops,Application Security->Nessus,Application Security->Wireshark,AWS DevOps,Blockchain Security,Cloud Security,Cloud Security->AWS Security,Cloud Security->Azure Security,Data Security->Data Classification,Data Security->Data Encryption,Data Security->IBM Guardium,Data Security->Public Key Infrastructure(PKI),Devops->Google Cloud Ptatform (GCP),GRC,GRC->Risk Assessment,GRC->RSA Archer(e-GRC),IDAM->CA Siteminder(CA Identity Suite),IDAM->Cyberark,IDAM->IBM Security Identity manager(ISIM),IDAM->Okta,IDAM->Oracle Access Manager(OAM),IDAM->Oracle Identity Manager(OIM),IDAM->Ping/Federate,IDAM->Sailpoint,Infrastructure Security->Antivirus,Infrastructure Security->Email Security,Infrastructure Security->Malware Analysis,Infrastructure Security->Symantec Endpoint(SEP),Network Security,Network Security->Firewalls->Checkpoint,Network Security->Firewalls->Juniper-Firewalls,Network Security->Firewalls->Palo Alto,Network Security->Firewalls->Web Application Firewall(WAF),Network Security->Load Balancer->F5,Network Security->Proxy->Blue Coat,OT Security,OT Security->OT Security,Security Incident and Event Management(SIEM)->Arcsight,Security Incident and Event Management(SIEM)->Logrythm,Security Incident and Event Management(SIEM)->QRadar,Security Incident and Event Management(SIEM)->RSA Envision,Security testing->Cloud Security,SOC,SOC->Breach Response,SOC->Security Monitoring,SOC->Security Operations Center(SOC/SIEM),Tools->Service Now->ServiceNow-Security,Tools->Splunk,Vulnerability Management

Experience: 1-2 years