Security Analyst L3 |UEBA

From 6 to 10 year(s) of experience
₹ Not Disclosed by Recruiter
Mumbai (All Areas)
Job Description
Worked on Snypr which is a Big data based Security analytics tool which includes SIEM and UEBA and which detects advanced cyber threats. It combines log management.
Worked on SIEM Implementation includes Incident management, SIEM
Administration/Installation/Configuration, Use case management, Threat models and Policy Configurations, Correlation rules, Data source onboarding, Log analysis and events monitoring, Dashboard Designing, Reports and Workflows.
Handling Incidents like Phishing, UEBA, Networks, Endpoints, Applications, Banks Proprietary App Malwares, APTs etc. with critical, medium and high severity in Splunk Enterprise Security.
Perform weekly Threat Hunting Exercises via Splunk by analyzing the logs (APIs, WAF, f/w, proxy, ad, endpoint, etc.) and prepare an executive summary report with all the informations IOCs,MITRE ATTACK TTPs.
Setup Secure Syslog (TLS) on the RHEL7 platform.
Setup Firewall Rules on RHEL7 platform. Knowledge on WAF.
Strong Understanding of Network Security terminologies like DLP, IDS, IPS, CASB application security, endpoint security, data protection.
Knowledge on networking concepts, protocols and networking devices.
Knowledge on Vulnerability Management
Knowledge on Splunk.

Certification :-

CEH V+ | Splunk Enterprise Certified Architect | CompTIA security certified

Key Skills
UebaUser entity behavior analyticsIncident ManagementSplunkImplementation
AdministrationInstallationConfigurationThreat HuntingSIEM
Skills highlighted with ‘‘ are preferred keyskills
Education

UG:BCA in Any Specialization,B.Sc in Any Specialization,B.Tech/B.E. in Any Specialization

Company Profile
NMS Consultant

Leading Cyber Security Service Provider

Company Info

Salary:

Not Disclosed by Recruiter

Industry:

IT Services & Consulting

Department:

IT & Information Security

Role Category:

IT Security

Role:

Security Engineer / Analyst

Employment Type:

Full Time, Permanent