• Mid Level SIEM

Industry Other
Location Maharashtra Mumbai
Experience Range 3 - 5 Years
Qualification Graduate
Not active

Functional Any Other
Job Description
About Us
“Quess IT Staffing is India’s largest IT staffing company with over 20 years of experience in staffing IT professionals in 300+ companies across levels and skillsets. Our 10,000+ associates deployed in 80+ cities and towns are proficient in over 500 technological skills. Our associates help enable cutting edge solutions some of the biggest names across industried. Quess IT Staffing is a division of Quess Corp Limited, India’s leading business services provider and largest domestic private sector employer. Quess Corp Limited is - ‘A Great Place to Work’ certified – a testament to our excellent culture, people, and processes.”
About Company
https://itstaffing.quesscorp.com/
Roles and Responsibility

Job Description

Mid Level SIEM

Exp - 3 to 5years

Np- 15days to Immediate


CEH or equivalent.

  •  Able to work in shifts on a rotating basis for 24X7.
  •  One to two years? experience in security information and/or technology engineering support.
  •  Experience with the following technologies: leading SIEM technologies (Exabeam \Splunk\Qradar\LogRhythm\Nitro\Chronicle) IDS/IPS, network- and host- based firewalls, data leakage protection (DLP), common EDR platforms etc.
  •  Understanding of possible attack activities such as network probing/ scanning, DDOS, malicious code activity, exfiltration, credential access, etc.
  •  An understanding of the Cyber Kill Chain, the MITRE attack framework, various TTPs described within and commonly used by attackers as well as how to write detection rules for them in SIEM and EDR solution.
  •  Understanding of tools, technologies and logging mechanism including understanding to common network devices such as routers, switches, load balancers etc.
  •  Understanding of typical cloud threats and knowledge of how to detect and prevent them, cloud logging and audit capabilities and the ability to develop detection rules around these
  •  Understanding of basic networking protocols such as IP, DNS, HTTP, and the network stack
  •  Basic knowledge in system security architecture and security solutions

 

 

A+| A| A-