Security Operation Centre Administrator

Job PurposeMonitors and analyzes the security procedures of an organization and defends against security breaches and actively isolates and mitigates security risks. In addition, SOC Administrator is responsible for integrating log sources into SIEM solutions and administering the health of integrated log sources into SIEM such as security devices, applications, servers etc. SOC operations, responsible for syncing between analysts and direct and orchestrates response to major security threats.

Key Tasks and DutiesPrimarily responsible for security event monitoring, management and responseSOC Cyber incident review and response Daily /Weekly/monthly SOC reports and checklist review and submission Ensure incident identification, assessment, quantification, reporting, communication, mitigation and monitoringEnsure compliance to SLA, process adherence and process improvisation to achieve operational objectivesRevise and develop processes to strengthen the current Security Operations Framework, review policies and highlight the challenges in managing SLAsManagement, administration & maintenance of security devices Perform threat management, threat modelling, identify threat vectors and develop use cases for security monitoringSPAM/Quarantine Email monitoring and management Blacklisting/Whitelisting of URL in URL filtering solution VPN access review, Reporting and monitoring Responsible for integration of standard and non-standard logs in SIEMCreation of reports, dashboards, metrics for SOC operations and presentation to Sr.

Mgmt. Perform any other related duties as required or assignedEnsure Timely on-boarding of IT / security assets (Applications, DB, OS) on SIEM/ SOAR platformQualificationsBachelor’s degree Information Security/Technology ManagementExperience2 years’ experience in Information Security/Technology Management/SOC operations