Job Code – EFF 101 : Cyber Security Lead

Must Have Skills:
Team management with good Information security technical expertise and ability to frontend customer interactions

• Security incident investigations using SIEM & EDR solutions.
• Experience in Security Incident Response Lifecycle.
• Experience in defining SOC monitoring usecases and operationalizing them through SOPs, and SIEM based alerts / reports.
• Experience understanding and interpreting Threat intelligence from various external sources including validation of related IOCs in customer environment.
• Good understanding of Vulnerability Management process including scanning, executive reporting and remediation tracking.
• Should have good conceptual understanding of Windows, Linux operating systems & Networking – TCP/IP Protocol Suite.
• Should understand the functioning of Security Technologies including Anti-virus, Firewalls, Intrusion Prevention, Packet Capture tools, Remote access technologies etc.
• Understanding of common network services (web, mail, DNS, FTP, etc.), network vulnerabilities, and network attack patterns.
• Possess knowledge and experience in Threat Ecosystem, remediating Malware, Rootkits and Botnets.
• Strong analytical and problem-solving skills.
  Good organization skills to ensure coordination and smooth hand-offs between onshore & offshore/nearshore teams.
• Strong communication (verbal and written) and interpersonal skills.
• Project Management experience with an ability to mentor the team and meet delivery objectives.