Security Email Security SIEM & SOAR Network Detection & Response DLP Admin Python Scripting & Automation Responsibilities Develop detection rules to support our SOC’s alerting and response capabilities.
Provide expert analytic investigative support to analysts for complex security incidents.
Implement and execute administrative, management, and lifecycle procedures for the SIEM.
Review security controls measures, identify gaps in the security architecture, and implement improvements or enhancements as needed.
Implement email security standards such as DKIM, SPF and DMARC.
Evaluates system security configurations to ensure efficacy and compliance with policies and procedures.
Researches and investigates the potential impact of new threats and exploits and recommends solutions to management.
Provides guidance on risks, vulnerabilities, or potential vulnerabilities within the architecture.
Deploy, configure, and maintain Data Loss Prevention (DLP) tools and solutions across enterprise systems.
Requirements
3-6 Years as Security Administrator & Information Security Domain.
Crowdstrike, Zscaler,, DLP, SIEM, & Python Scripting for automation
Should have good knowledge on: - Endpoint Security Web Filtering & proxy
Demonstrated experience with deploying and operating network security tools, including but not limited to Antivirus, IDS, firewalls, proxies and security gateways.
Automate administrative tasks, reporting, and data processing using Python scripts and applications.
Excellent communication skills both written and verbal include the capacity to communicate complex and technical issues.