IMSI jobs - SIEM Support Engineer - TL

SIEM Support Engineer - TL        

Qualification: 10+2+3 (Graduate / Diploma )

Certification: CISSP, CCNA

Experience Level: 5- 6 Years

Technologies Covered: Q-Radar, Arcsight            

Locations:  Delhi NCR, Bangalore, Chennai, Hyderabad, Pune, Ahmedabad, Mumbai, Kolkata

Job Description:

• Minimum 4 years of experience in full lifecycle of incident management and root cause analysis in SOC and information security operations
• Experience should include conducting incident analysis, forensics and root cause analysis
• Good knowledge of networking systems and perimeter security devices
• Must be an Engineering graduate
• Knowledge of network security zones, Firewall configurations, IDS policies
• Knowledge of systems communications from Layer 1 to 7
• Experience with Systems Administration, Middleware, and Application Administration
• Experience with Network and Network Security tools administration
• Knowledge of log formats and ability to aggregate and parse log data for syslog, http logs, DB logs  for investigation purposes
• In-depth experience with log search tools, usage of regular expressions and natural language queries
• In-depth knowledge of packet capture and analysis
• Experience with Security Assessment tools (NMAP, Nessus, Metasploit, Netcat
• Ability to make/ create a containment strategy and execute