Manager- SIEM, Security

Mandate Skills- SIEM, PAM, Endpoint security & Vulnerability assessment.

Key Responsibilities
Incident Response and Management:

Lead the incident response process, including identification, containment, eradication, and recovery.
Analyze and respond to complex security incidents and breaches.
Conduct post-incident analysis and develop reports with recommendations to prevent future incidents.

Security Monitoring and Analysis:

Oversee the continuous monitoring of security alerts and events.
Analyze logs and data from various sources (e.g., SIEM, firewalls, EDR, IDS/IPS) to identify suspicious activity.
Perform advanced threat hunting and forensic analysis.

Vulnerability Management:

Conduct regular vulnerability assessments.
Identify, prioritize, and remediate security vulnerabilities in systems and applications.
Collaborate with IT and development teams to implement security patches and updates.

Security Architecture and Engineering:

Design and implement security solutions to protect the organization's networks, systems, and data.
Develop and maintain security policies, standards, and procedures.
Evaluate and recommend new security technologies and tools.

Compliance and Risk Management:

Ensure compliance with relevant regulatory requirements and industry standards (e.g., ISO 27001, NIST).
Perform risk assessments and develop mitigation strategies.
Document and maintain security controls and frameworks.

Required Skills and Qualifications
Technical Expertise:

Advanced knowledge of cybersecurity principles, techniques, and technologies.
Proficiency in using security tools such as SIEM, IDS/IPS, firewalls, and endpoint protection solutions.
Experience with vulnerability management, penetration testing, and forensic analysis.

Experience:

Minimum of 7-10 years of experience in cybersecurity, with at least 2-3 years in an L3 or senior role.
Proven track record of handling complex security incidents and leading incident response efforts.
Experience in designing and implementing security architectures and solutions.

Certifications:

Relevant certifications such as CISSP, CISM, CEH, GIAC, or equivalent are highly desirable.

Analytical and Problem-Solving Skills:

Strong analytical skills with the ability to identify and mitigate security threats.
Excellent problem-solving skills and the ability to think critically under pressure.

Communication and Collaboration:

Strong communication skills, both written and verbal.
Ability to collaborate effectively with cross-functional teams and stakeholders.

Preferred Skills and Qualifications
Experience with cloud security (e.g., AWS, Azure, Google Cloud).
Knowledge of scripting and automation tools (e.g., Python, PowerShell).
Familiarity with regulatory requirements and standards (e.g., GDPR, HIPAA).