IT Security (SOC L1&L2 Splunk Certified)  

• Monitor the security access and report probable cyberattacks to a superior employee in the company

• Perform risk analysis and security operations to find any vulnerability that can have an impact on the company

• Find security breaches, along with their root cause

• Create reports that will allow experts to make changes in the security policies as per the needs of the organization

• Come up with improvement strategies for better company security

• Update the company’s security systems regularly to avoid any cyberattack

• Perform security audits

1. Have min 3-year experience in Cyber Security or at least 1-year of working as a L2 SOC.

2. Responsible for working in a 24x7.

3. Have min certification Splunk Power User, ECSA and ECIH or equivalent.

4. Have depth knowledge of Security and Network.

5. Have depth knowledge and concept cyber-attacks and techniques, threat vector, risk, and incident management.

6. Have good knowledge of various operating system like Windows, Linux, Unix etc...

7. Have good knowledge about various SIEM Splunk and Security Perimeter Device and Tools.

8. Have good Documentation and Reporting Incident.

9. Have experience Threat Hunting.

10. Have experience Regular Expression (Regex).

11. Have experience create Splunk Dashboard, Use Case and Policy related with alert/issue/vulnerability and other security issue.

12. Have experience create knowledge base/Playbook/Guideline for investigation process and every SOC process activity.

13. Can performed evaluation false positive alert/issue/vulnerability.

14. Have good knowledge for develop and improve processes for monitoring and incident.