Protiviti - Security Operations Centre Engineer

Description :

Knowledge in SOC with experience in monitoring and analysis in Microsoft Sentinel SIEM, Microsoft Defender and Sentinel One EDR.

SIEM, SOAR and UEBA :

- End to end SOC management with hand on experience in multiple SIEM platforms.

- Experience in creating used cases in SIEM

- Log source onboarding with SIEM

- Highly experienced and hands on SOAR platform with playbook creation

- Experience in UEBA

- Experience in implementing automation

- Fine tuning the policies and removing the false positives

- Hand on experience in multiple EDR platforms, i.e. MS Defender, Crowdstrike, Sentinel One, etc.

- Experience in implementing EDR with creating policies/ used cases

- Integration with SOC

- Fine tuning the policies and removing the false positives

- Hand on experience in multiple DLP platforms, i.e. Proofpoint, Forcepoint, Netskope, etc.

- Experience in implementing DLP with creating policies/ used cases

- Integration with SOC

- Fine tuning the policies and removing the false positives

Team Handling and Project Management :

- He/ she should have the experience in handling large, complex and multiple projects

- He/ she should have the experience of team building and handling large team

- Front ending with the clients and very good written and oral English communication

- Ready to work on 24/7 shift