Cyber Security/SOC Specialist - SIEM Solutions

Description:

Job Summary :-

We are seeking a skilled and motivated Cyber Security / SOC Specialist with hands-on expertise in PIM/PAM, DAM, Trend Micro, Forescout NAC, WAF, SIEM, and Firewall security solutions.

The candidate will be responsible for monitoring, analyzing, detecting, and responding to cybersecurity incidents and managing security tools and platforms.

Key Responsibilities:

- Monitor and manage SIEM solutions (L1L3) for real-time security alerts and incidents.

- Configure, implement, and troubleshoot Firewall, WAF, PIM/PAM, and Trend Micro security solutions.

- Handle Forescout NAC administration, onboarding/offboarding of devices, and policy management.

- Manage and optimize Database Activity Monitoring (DAM) tools and alerts.

- Perform incident triage, analysis, escalation, and root cause identification.

- Collaborate with IT & security teams to mitigate vulnerabilities and improve posture.

- Create and maintain security documentation, runbooks, and incident reports.

- Lead and mentor SOC analysts in shift operations (for L3L4 roles).

- Work on threat hunting, incident response, and vulnerability management activities.

Required Skills:

- PIM/PAM (L1) Privileged Access Management operations, user onboarding/offboarding.

- DAM (L1L2) Database activity monitoring, policy configuration, incident response.

- Trend Micro (L1L2) Endpoint security, malware analysis, threat protection.

- Forescout NAC (L1L2) Network access control configuration and monitoring.

- WAF (L2) Web Application Firewall configuration, rule management.

- SIEM (L1L3) Log monitoring, correlation rule creation, incident response.

- Firewall (L1L2) Policy configuration, monitoring, and troubleshooting.

- SOC Manager (L4) Team handling, shift operations management, escalation management.

Additional Preferred Skills:

- Knowledge of threat intelligence & hunting

- Basic scripting (Python, PowerShell, Bash)

- Experience with security frameworks (MITRE ATT&CK, NIST, ISO 27001)

- Incident response & forensic investigation skills.

Education & Certifications:

- Bachelors Degree in Computer Science / IT / Cybersecurity (or equivalent experience)

- Certifications preferred: CEH, CompTIA Security+, Splunk, CISSP, CISM, Palo Alto / Fortinet, etc.