SOC & SIEM Administrator

Saudi Arabia

Job ID SNS-0899

Posted On
25-Nov-2024
(175 days ago)

Job type
Contract

Sector
Technology

Bachelor's Degree in Computer Science, Cybersecurity, Computer Engineering, Information Systems and/or equivalent experience in a related field is preferred; however, equivalent years of hands-on engineering experience, education and certifications may be considered in lieu of educational requirements.
Four (4) to six (6) years of SOC operations experience (MSSP Environment Experience is a strong plus).
Extensive experience in Design, Implementation and Operations of complex security events and usecases across various Industry sectors, among other security solutions. And has certification in administrating SIEM and SOAR Solutions.
Previous experience working as a systems/network administrator.
Previous experience configuring / implementing network security solutions (e.g. SIEM,
firewalls, IPS, IDS, VPNs, etc.).
Previous experience with one or more SIEM technologies (e.g. QRadar, Splunk, LogRythm, etc.)
Solid knowledge of operating systems, mainly Windows, Linux, and macOS.
Solid knowledge of networking protocols, concepts, and technologies (including TCP/IP,
WANs, LANs, and commonly used Internet protocols such as SMTP, HTTP, FTP, POP, LDAP).
Solid knowledge of foundational security concepts, e.g.: kill chain, defense-in-depth, systems hardening, etc.
Knowledge of cyber threats and vulnerabilities.
Knowledge of adversarial tactics, techniques, and procedures (TTP) and mitigation steps.
Knowledge of incident response and handling methodologies.
Knowledge of risk management processes (e.g., methods for assessing and mitigating risk).
Knowledge of threat hunting techniques, tools, and operational procedures.
Good understanding in Log formats of various security devices like Proxy, Firewall, IDS/IPS, DNS, etc.
Experience with developing and implementing new playbooks and automate manual SOC procedures.
Experience with SOAR implementation / Playbook Development / SecOps Automation.
Experience managing complex security solutions in large environments.
Excellent understanding and administration experience of following security areas:
Knowledge in handling other security controls (e.g. EDR, Email Gateway..etc.)
Knowledge in Maintaining security platform stability and health.

Back to list