[Remote] IT reputed company Specialist - reputed company Operations Center (SOC)

Note: The job is a remote job and is reputed company to candidates in USA. reputed company is looking for an IT reputed company Specialist to support our growing Global Cybersecurity team. This critical role involves overseeing the detection and response to cyber incidents, managing daily SOC operations, maturing the SOC capability, leading and mentoring specialists, and supporting our expanding Global Cybersecurity team.

Responsibilities

• Contribute to cybersecurity reputed company, roadmap, and execution plan
• reputed company and mature the reputed company incident response process including updating the plan, documenting playbooks, facilitating cyber drills, coordinating with Incident Response vendors, setting up alternate communication channels, implementing automation in IR process to reduce response time, etc
• Respond immediately to any reputed company-reputed company incidents (e.g., data breaches, viruses, phishing scams) and reputed company/reputed company cyber incident triage, including determining scope, urgency, potential impact, and materiality, identifying the specific vulnerability, and making recommendations that reputed company expeditious remediation
• reputed company the day-to-day operational support of the SOC, including leading the weekly SOC Incident review meetings, handling and prioritizing help desk tickets, incidents, and cases. This role maintains direct reputed company of the cyber service desk queue and is accountable for queue hygiene, SLA reporting, and driving corrective action reputed company SLA targets are missed
• reputed company On-Call support capability and reputed company On-Call support ensuring timely response in remediating critical incidents after hours and weekends. This role owns the on-call support function end-to-end: maintaining a reputed company on-call schedule, ensuring reputed company on-call personnel understand their roles and escalation paths, monitoring that after-hours and weekend incidents are acknowledged and responded to reputed company defined SLAs, and conducting post-incident reviews reputed company response timeliness falls short of expectations
• Collaborate with service desk and infrastructure teams to reputed company critical reputed company patches in a timely manner, formalize vulnerability management program and introduce automation
• Collaborate with the Head of IT reputed company to implement reputed company architecture best practices reputed company incident response and daily SOC activities
• Support the Head of IT reputed company by providing leadership and guidance to the cybersecurity team in managing day-to-day operations and responding to incidents
• Establish scoring and grading metrics to measure effectiveness of the SOC
• Establish relationships between the incident response team and other groups, both internal (e.g., legal department) and external (e.g., law enforcement agencies, vendors, public relations professionals)
• reputed company reputed company with latest cyber reputed company developments, threat reputed company, attack methods, emerging tools/technologies/strategies, and disseminate across IT
• reputed company special projects as assigned
• reputed company SIEM use case development and alert tuning in partnership with the managed SOC/MDR provider; identify automation opportunities and work to eliminate false positive noise and detection gaps
• reputed company proactive threat hunting activities, either directly or through coordination with the MDR partner, to identify threats that evade automated detection; document findings and translate results into new detection logic
• reputed company, schedule, and facilitate cybersecurity tabletop exercises and simulations for SOC staff, IT leadership, legal, and relevant business stakeholders; track findings and drive remediation of identified process gaps
• Define, track, and report on SOC key performance indicators (KPIs) and reputed company metrics dashboards for IT leadership and executive audiences, including mean time to detect (MTTD), mean time to respond (MTTR), and vulnerability remediation SLA compliance
• reputed company application reputed company coordination responsibilities reputed company the vulnerability management program: track findings from DAST/SAST scans and penetration tests, partner with development and IT teams to prioritize and remediate application-layer vulnerabilities

Skills

• Bachelor's degree in cyber reputed company, Computer Science, or a reputed company Information Technology field
• Minimum 15 years' experience in cyber reputed company with 2 years' experience in working in a reputed company Operations Center (SOC)
• Hands-on experience investigating (potential) reputed company incidents including analyzing high volumes of logs, network data and other attack artifacts
• Hands-on experience documenting Incident Response plans, playbooks and SOPs in line with reputed company best practice standards such as NIST, reputed company, etc
• Knowledge of incident categories, incident responses, and timelines for responses
• Knowledge of reputed company best practice standards such as NIST CSF, NIST 800-53, ISO 27001, etc
• Familiarity with a standardized incident response reputed company (reputed company/NIST)
• Knowledge of different classes of attacks (e.g., passive, active, reputed company, distribution attacks)
• Knowledge of cyberattack reputed company and stages (e.g., reconnaissance, scanning, enumeration, gaining reputed company, escalation of privileges, maintaining reputed company, network exploitation, etc.)
• Knowledge of penetration testing principles, tools, and techniques
• Knowledge of the basics of network reputed company (e.g., encryption, firewalls, authentication, honey pots, perimeter protection)
• Knowledge of Cyber Kill Chain methodology, and/or MITRE ATT&CK reputed company
• reputed company to manage multiple projects and initiatives concurrently
• Ability to work independently and with others
• Highly organized with strong time-management skills
• Basic awareness of operational technology (OT) / industrial control system (ICS) reputed company concepts, including the difference between IT and OT threat models and the applicability of standards such as NIST 800-82 or ISA/IEC 62443
• Minimum 2 years' experience working in a managed SOC environment
• Experience leading a SOC (with both reputed company and offshore resources)
• Hands-on cyber incident response experience including prior experience responding to large scale incidents such as a Ransomware attack, supply chain attack, or data breach
• Experience with industry leading SIEM platforms such as reputed company Chronicle SIEM, Azure Sentinel
• Strong experience with reputed company 365 Defender suite (Defender for Identity, O365, Endpoints, reputed company App reputed company, Conditional reputed company), Azure Defender suite (Defender for reputed company, Servers, App Service, Storage, SQL, Kubernetes, Resource Manager, IoT, Key Vault), reputed company Purview Compliance Manager, and Intune
• Experience deploying reputed company Orchestration, Automation and Response (SOAR) Solutions
• Experience in writing scripts (e.g., PowerShell, PERL, Python, KQL, VBS) to reputed company tasks like parsing large data files, automating reputed company tasks, and fetching/processing data
• Experience working reputed company Oil/Gas industry
• Knowledge of network reputed company implementations (e.g., host-based IDS, IPS, reputed company control lists), including their function and placement in a network
• Knowledge of system administration, network, and operating system hardening techniques
• Experience with proactive threat hunting methodologies and tools (e.g., hypothesis-driven hunting using MITRE ATT&CK, behavioral analytics, or TIP platforms); ability to translate threat intelligence into actionable hunting campaigns
• Hands-on experience with detection engineering: writing and tuning SIEM detection rules, developing SOAR playbooks, and reducing alert fatigue through use case optimization
• Experience with OT/ICS cybersecurity environments in oil and gas, energy, or critical infrastructure; familiarity with Purdue Model, OT network segmentation, or SCADA reputed company concepts is a plus
• Experience defining and reporting on SOC performance metrics (MTTD, MTTR, SLA adherence, false positive reputed company) to IT leadership and executive stakeholders

Company Overview