Senior Security Analyst
CurrentThreat Monitoring:-Manage escalated cases to the Tier-2 queue o Analyze and respond to security events from SIEM, EDR, FWS, IDS, IPS, AV and other security data sources. o Deliver high quality Incident Handling and investigation o Be the 2nd level of escalation Tier-1 Security Analysts o Perform on-call for Threat Monitoring and Security Device Management escalation outside of business hours. Service improvement :-Perform rules tuning of client SIEM in operation o Support rules factory program in improving the global set of detection o Validate Go-to-Active and Go-to-Prod gates of our new clients to ensure a smooth transition to operation o Continuously improve incident templates in terms of content for the clients and in terms of automation to best support the operation o Support rollout of new set of rules for MSS clients o Qualify, analyze, and provide recommendations for new standard data source requests o Support Product teams to build best new services to fit with Operations capabilities (needs, scalability, efficiency) General responsibilities:- Take responsibility for customer satisfaction and overall success of managed services. o Be available, ready, and able to accept incoming clients calls o Recommend improvements for Standard Operating Procedures o Propose enhancement on tools and workflow o Respond in a timely manner (within documented SLA) to support tickets. o Document actions in tickets to effectively communicate information internally and to customers. o Adhere to policies, procedures, and security best practices. o Mentor fellow Security Engineers and Security Analysts.
