What you'll do

- Escalate validated and confirmed incidents to DevOps and Engineering team.
- Fine-tune SIEM rules to reduce false-positive and remove false negatives.
- Collect global threat intelligence and help integrate it with current security tools Proactively research and monitor security information to identify potential threats that may impact the organization.

What You'll Bring

- Knowledge and hands-on experience in the implementation and management of IDS/IPS, Firewall, VPN, and other security products.
- Experience with Security Information Event Management (SIEM) tools, creating advanced co-relation rules, administration of SIEM, system hardening, and Vulnerability Assessments.
- Should have expertise in TCP/IP network traffic and event log analysis.
- Knowledge and hands-on experience with Log Rhythm, QRadar, Arcsight, Mcafee EPO, NetIQ Sentinel, or any SIEM tool.
- Configuration and Troubleshooting experience on Checkpoint, Cisco, Fortigate, PaloAlto, and Sonicwall