Overview
Job Title: SOC Lead
Location: San Jose, CA
SOCLead engineer based out of our San Jose, below is the JD for the same - we need a person with around 5-10years of relevant experience
Responsibilities
- Monitor security alerts from various security tools (SIEM, DLP, EDR, IDS/IPS, firewalls, etc.).
- Detect potential security incidents such as unauthorized access, malware activity, and abnormal behavior.
- Review and analyze security event logs and alerts to identify security threats.
- Triage the incidents to determine their severity and impact.
- Follow defined workflows and playbooks to respond to security incidents.
- Maintain and update incident logs and tracking systems across SIEM and ITSM.
- Escalate unresolved / complex incidents that require further investigation or specialized skills to L2 / Incident response teams.
- Collaborate with client’s other IT teams (e.g., network, systems, and application teams) to resolve security issues.
- Assist with the identification of security vulnerabilities in systems, networks, and applications. Perform vulnerability scanning through tools. Assist with the closing of vulnerabilities.
- Monitor the health and status of security systems, including firewalls, anti-virus software, and endpoint protection.
- Generate daily, weekly, or monthly reports on security incidents and activities for senior management. Document security incidents and actions taken in accordance with incident response policies.