Lead - Captive Operations

About The CompanyTata Communications Redefines Connectivity with Innovation and IntelligenceDriving the next level of intelligence powered by Cloud, Mobility, Internet of Things, Collaboration, Security, Media services and Network services, we at Tata Communications are envisaging a New World of CommunicationsExperience / Skills> Ownership of SIEM platform in terms of administration and management (should be currently performing this role) Ensuring platform and service uptime Efficient management of the platform to ensure proper performance. Upgrade and updates (KBs)/ patch as per OEM Platform capacity management Administration and management of underlying Infrastructure Layer Log Source Integration to include development of custom parsers for non-supported log sources Integration with other platforms like Threat Intelligence Configuration of SOAR plugins and playbooks Advanced troubleshooting of the SIEM platform Problem management. Working closely with OEM Configuration of rules reports and dashboards based on inputs from monitoring team. Documentation of RCAs for major incidents> Other skills required Ability to interact with and manage customer stakeholders in the context of platform management. Good team working skills and communication.Technology and skills SIEM: ArcSight is mandatory. SOAR/UEBA: SIEM native of any third party Threat Intelligence and Brand Monitoring Scripting: Flex or Regex is mandatory. OS: Windows and Linux (intermediate skills) Good knowledge of security domain is mandatoryWorking Window Should be flexible to work in shifts and on demand for any weekend activities Should be open to working in customer locationQualificationsMinimum 7+ years of relevant experience with BCA/BSc-ITOr minimum 5+ years of relevant experience with B.E./B.Tech/MCASIEM product: ArcSight is mandatorySoft SkillsExcellent problem-solving andtroubleshooting skills.Ability to work under pressure and meetdeadlines.Strong team collaboration and willingnessto learn from senior team members.Strong communication and incidentdocumentation/reporting ability.