Lead Consultant – Sr Security Analyst

Responsibilities

NOC & SOC Services (Arctic Wolf, SentinelOne, Varonis, etc.)
Experience on Rapid7 Vulnerability Management, Mimecase Email Security, Sumo Logic SIEM, Intrusion Prevention
Candidate should have experience of Cyber Security Administration.
Monitoring and analyzing security systems: They monitor networks, systems, and applications for any suspicious activity or vulnerabilities. They use various tools and technologies to identify and analyze potential security threats.
Incident response and investigation: When a security breach occurs, cyber security analysts respond quickly to contain and mitigate the impact. They investigate the incident to understand the cause, assess the damage, and develop strategies to prevent future occurrences.
Vulnerability assessment and penetration testing: They conduct regular assessments to identify weaknesses in systems or networks. They perform penetration testing to simulate attacks and identify vulnerabilities before malicious hackers exploit them.
Implementing security measures: Based on their analysis and findings, cyber security analysts develop and implement security measures, such as firewalls, encryption methods, access controls, and security policies.
Security awareness and training: They educate employees on security best practices, conduct training sessions, and create awareness campaigns to foster a security-conscious culture within the organization.
Keeping up with industry trends: Cyber security is a rapidly evolving field. Analysts need to stay up to date with the latest threats, vulnerabilities, and industry best practices to effectively protect organizations from emerging risks.
Compliance and risk management: They ensure compliance with relevant security standards and regulations. They assess risks associated with data breaches and provide recommendations to manage those risks effectively.
Review and Approve firewall rules mostly around Palo Alto firewall.
Review and approve local admin rights and other requests.
Triage and respond to end user queries and escalations related to phishing or suspicious emails.