SOC Lead

Overview

Job Title:

SOC Lead

Location:

San Jose, CA

SOCLead engineer based out of our San Jose, below is the JD for the same - we need a person with around 5-10years of relevant experience

• Monitor security alerts from various security tools (SIEM, DLP, EDR, IDS/IPS, firewalls, etc.).
• Detect potential security incidents such as unauthorized access, malware activity, and abnormal behavior.
• Review and analyze security event logs and alerts to identify security threats.
• Triage the incidents to determine their severity and impact.
• Follow defined workflows and playbooks to respond to security incidents.
• Maintain and update incident logs and tracking systems across SIEM and ITSM.
• Escalate unresolved / complex incidents that require further investigation or specialized skills to L2 / Incident response teams.
• Collaborate with client’s other IT teams (e.g., network, systems, and application teams) to resolve security issues.
• Assist with the identification of security vulnerabilities in systems, networks, and applications. Perform vulnerability scanning through tools. Assist with the closing of vulnerabilities.
• Monitor the health and status of security systems, including firewalls, anti-virus software, and endpoint protection.
• Generate daily, weekly, or monthly reports on security incidents and activities for senior management. Document security incidents and actions taken in accordance with incident response policies.