SME - Security Analysis, SIEM

Job Summary

Mandatory: 8-12 years of hand-on experience in operation and management of security infrastructure. Minimum 8 years of hands-on skills on one or more of the following technologies Experience in Upgrades, Solution designing and implementation of various security products. Should be willing to work in 24x7 shifts. Demonstrated knowledge of ITIL principles and processes. Troubleshoot sentinel server and forwarder problems and issues. Assist internal users of Sentinel in designing and maintaining production-quality dashboards. Monitor the sentinel infrastructure for capacity planning, system health, availability, and optimization. Assist with design of core scripts to automate SPLUNK maintenance and alerting tasks. Support SPLUNK on UNIX, Linux and Windows-based platforms. Assist with automation of processes and procedures Bring new data into the SPLUNK platform per client request, creating custom sourcetypes when necessary. Verify custom reports, manage log source groups, and validate log sources with client Troubleshoot issues if reports generated form Splunk have incorrect data Should be able to re-initialize indexing if required. Experienced in administering and Maintaining Splunk Servers Solid experience of writing and analyzing Splunk Queries Ability to provide Tier 3 support and manage complex and escalated tickets in production environment. Leadership skills to deliver quality service in individual role or manage a team of engineers to deliver service as per agreed SLAs. Ability to communicate (both written & oral) clearly with various internal stakeholders and customer Highly Desirable: Good hands on experience with the installation and administration . Experience on working in a global support environment, experience of ticketing-tools and exposure to ITIL processes in context of service operations is a plus. Ability to investigate logs Splunk certification( Power user Certification) would be preferred Sentinel Experience of providing support to international customers in live environment

Key Responsibilities

Mandatory: 8-12 years of hand-on experience in operation and management of security infrastructure. Minimum 8 years of hands-on skills on one or more of the following technologies Experience in Upgrades, Solution designing and implementation of various security products. Should be willing to work in 24x7 shifts. Demonstrated knowledge of ITIL principles and processes. Troubleshoot sentinel server and forwarder problems and issues. Assist internal users of Sentinel in designing and maintaining production-quality dashboards. Monitor the sentinel infrastructure for capacity planning, system health, availability, and optimization. Assist with design of core scripts to automate SPLUNK maintenance and alerting tasks. Support SPLUNK on UNIX, Linux and Windows-based platforms. Assist with automation of processes and procedures Bring new data into the SPLUNK platform per client request, creating custom sourcetypes when necessary. Verify custom reports, manage log source groups, and validate log sources with client Troubleshoot issues if reports generated form Splunk have incorrect data Should be able to re-initialize indexing if required. Experienced in administering and Maintaining Splunk Servers Solid experience of writing and analyzing Splunk Queries Ability to provide Tier 3 support and manage complex and escalated tickets in production environment. Leadership skills to deliver quality service in individual role or manage a team of engineers to deliver service as per agreed SLAs. Ability to communicate (both written & oral) clearly with various internal stakeholders and customer Highly Desirable: Good hands on experience with the installation and administration . Experience on working in a global support environment, experience of ticketing-tools and exposure to ITIL processes in context of service operations is a plus. Ability to investigate logs Splunk certification( Power user Certification) would be preferred Sentinel Experience of providing support to international customers in live environment

Skill Requirements

Mandatory: 8-12 years of hand-on experience in operation and management of security infrastructure. Minimum 8 years of hands-on skills on one or more of the following technologies Experience in Upgrades, Solution designing and implementation of various security products. Should be willing to work in 24x7 shifts. Demonstrated knowledge of ITIL principles and processes. Troubleshoot sentinel server and forwarder problems and issues. Assist internal users of Sentinel in designing and maintaining production-quality dashboards. Monitor the sentinel infrastructure for capacity planning, system health, availability, and optimization. Assist with design of core scripts to automate SPLUNK maintenance and alerting tasks. Support SPLUNK on UNIX, Linux and Windows-based platforms. Assist with automation of processes and procedures Bring new data into the SPLUNK platform per client request, creating custom sourcetypes when necessary. Verify custom reports, manage log source groups, and validate log sources with client Troubleshoot issues if reports generated form Splunk have incorrect data Should be able to re-initialize indexing if required. Experienced in administering and Maintaining Splunk Servers Solid experience of writing and analyzing Splunk Queries Ability to provide Tier 3 support and manage complex and escalated tickets in production environment. Leadership skills to deliver quality service in individual role or manage a team of engineers to deliver service as per agreed SLAs. Ability to communicate (both written & oral) clearly with various internal stakeholders and customer Highly Desirable: Good hands on experience with the installation and administration . Experience on working in a global support environment, experience of ticketing-tools and exposure to ITIL processes in context of service operations is a plus. Ability to investigate logs Splunk certification( Power user Certification) would be preferred Sentinel Experience of providing support to international customers in live environment

Other Requirements

Mandatory: 8-12 years of hand-on experience in operation and management of security infrastructure. Minimum 8 years of hands-on skills on one or more of the following technologies Experience in Upgrades, Solution designing and implementation of various security products. Should be willing to work in 24x7 shifts. Demonstrated knowledge of ITIL principles and processes. Troubleshoot sentinel server and forwarder problems and issues. Assist internal users of Sentinel in designing and maintaining production-quality dashboards. Monitor the sentinel infrastructure for capacity planning, system health, availability, and optimization. Assist with design of core scripts to automate SPLUNK maintenance and alerting tasks. Support SPLUNK on UNIX, Linux and Windows-based platforms. Assist with automation of processes and procedures Bring new data into the SPLUNK platform per client request, creating custom sourcetypes when necessary. Verify custom reports, manage log source groups, and validate log sources with client Troubleshoot issues if reports generated form Splunk have incorrect data Should be able to re-initialize indexing if required. Experienced in administering and Maintaining Splunk Servers Solid experience of writing and analyzing Splunk Queries Ability to provide Tier 3 support and manage complex and escalated tickets in production environment. Leadership skills to deliver quality service in individual role or manage a team of engineers to deliver service as per agreed SLAs. Ability to communicate (both written & oral) clearly with various internal stakeholders and customer Highly Desirable: Good hands on experience with the installation and administration . Experience on working in a global support environment, experience of ticketing-tools and exposure to ITIL processes in context of service operations is a plus. Ability to investigate logs Splunk certification( Power user Certification) would be preferred Sentinel Experience of providing support to international customers in live environment