- Daily Health check of multi-vendor Security Devices and action according to the findings.
- Analysis and response to Device monitoring alerts/tickets.
- Troubleshooting and logical thinking skills to resolve issues at the earliest.
- Security device (Firewall, WAF, Proxy, IPS/IDS) configuration, changes and administration keeping best security practices.
- Support the incident response team during major security incident with advance investigation skills.
- Closely work with SOC team and be responsible for incident detection, triage, analysis and response and resolution.
- Handle L2 and above level technical escalations from L1 Operations team and resolve within SLA.
- Periodic security rule review and suggestions for continuous improvement of client security posture.
- Escalation handling, reporting and resolutions within SLA.
- Preparation and walkthrough of the daily, weekly, and monthly reports to the customer/stake holders.
- Ready to work in 24x7 rotational shift model including night shift.
- Incorporate and follow all change management processes and procedures as outlined by the customer.
- Identify the process and technology gaps and drive for closure.
- Explore different technologies available in the security industry.
- Coordination with different stakeholders for closure of SR/CR/IN.
- Coordination with internal customers for their security related problems and providing solutions.
- Create and manage various KEDBs the SOPs, runbooks, asset inventory with risk classification, critical application flow diagram, network flow diagram, privileged user list.
- Continually improve upon skills and ability to learn new technologies
- Mentor and monitor L1 team members for their daily activities.
- Provide KT and required training to other team members.
Who you are: Cloud and Infrastructure Security Operations Delivery
What you’ll do: Support multiple customer using multi-vendor security tools and technologies by securing their day to day business delivery.
- Handson experience in at least two vendor firewalls (Fortigate/PaloAlto/Checkpoint/Cisco/Juniper/ Sonicwall, Azure native)
- Handson experience in at least one vendor Web Application Firewall (WAF) is an added benefits.(Fortigate/F5/Checkpoint/ Cisco/Citrix NetScaler/Azure Native)
- Handson experience in at least one vendor Proxy. (Forcepoint/Mcafee/Bluecoat/Zscalar/TrendMicro/ Prisma)
- Handson experience troubleshooting and problem solving a wide variety of client IT security related issues using these technologies (Cisco FTD/Palo Alto/Checkpoint/Fortinet/Azure firewalls, IDS/IPS, VPN, proxy, Bluecoat/Forcepoint/Zscalar Web filtering).
- Should have good technical knowledge and hands on in cloud security solutions (AWS, Azure) like Microsoft cloud native security, PaloAlto, Zscalar.
- Experience on firewall rules and traffic flow.
- Experience on clustering and high availability.
- Manage day to day firewall operations, implementing firewall rule requests i.e. configuration changes like Port opening, fine tuning.
- License update, Version management.
- Experience in configuration and implementation of VPN across various vendor perimeter devices.
- Experience in routing technologies.
- Skilled in analysing and monitoring network security solutions.
- Managing whitelist and blacklist traffic according to the requirements/advisories.
- Knowledge on IPS/IDS, DDoS, Cisco ISE, VSG, NSG, LLB, GSLB are added advantage.
- Linux Basic knowledge, Advanced preferable.
- Basic Scripting knowledge in Python or shell scripting.
- MS Visio.