Security Operations - Westbborough near Boston, MA

Security Operations - Westborough near Boston, MA

Contract. IT. Role:
Security Operations.

Location:

Westborough near Boston, MA. Duration: 6+ Months. Background verification will be conducted for selected candidates.

• Incident analysis and resolution.
• Adding devices in the monitoring tool.
• Troubleshooting L2 incidents and closing incidents on the ITSM tool while updating the knowledge‑base documentation.
• Performing configuration changes as recommended by the L3 team.
• Log analysis and management—moving logs from the log server to reduce memory consumption and resource utilization.
• SNMP configuration on security devices.
• Creating SOC tool user accounts.
• Creating user roles.
• Creating reports and basic dashboards.
• Monitoring and fixing tool license issues.
• Vendor coordination and follow‑ups (e.g., RMA, TAC, patch upgrades).
• Analyzing and reporting threats and attacks.
• Maintaining documentation such as risk register, run book, and SOP verification.
• Coordination with SME for root cause analysis.
• Reporting SLA and KPI metrics.
• Supporting the security controls and analysis.
• Resolving incidents from the Symantec SaaS SOC up to an L2 level.
• Escalating incidents immediately when necessary.
• Following playbooks that require immediate actions, such as removing a virus‑infected computer from the network.
• Executing change controls for the security environment: patching hardware/software, rule changes, building VPN B2B IPsec tunnels, and other typical security environment changes.

• Checkpoint firewall (version R77.xx) – 23 HA clusters
• Cisco ASA 51xx series
• Blue Coat Secure Web Gateway, CAS, Future SSL‑V appliance
• Fire Eye ETP
• Symantec
• Tufin
• SOC & Security Analysis reporting
• Proofpoint

• Using the Symantec SOC portal for log analysis, user administration, and security control management.
• Analyzing and managing logs on the security hardware.
• Using the Tufin cybersecurity network security reporting tool.
• Using the Fire Eye ETP tool for email security controls.
• Using the Proofpoint email security tool.