Manager - Captive Operations

About The Company
Tata Communications Redefines Connectivity with Innovation and IntelligenceDriving the next level of intelligence powered by Cloud, Mobility, Internet of Things, Collaboration, Security, Media services and Network services, we at Tata Communications are envisaging a New World of Communications
Roles/Responsibilities
Experience in SIEM Tool like ArcSight, LogRhythm SIEM, Threat Intelligence, Malware Analysis, Incident Response
Experience in handling SOC customer in MSSP/multi-tenant environment
Responsible for the technical Administration or troubleshooting in SIEM ensuring the efficient functionality of the solution
Responsible for Incident Validation, Incident Analysis, Solution Recommendation,
Good knowledge on implementation, installation, integration troubleshooting and overall functionalities of LogRhythm/ArcSight/QRadar/Splunk
Arc Sight/LR/QRadar platform administration, management experience, platform upgrade
Experience in troubleshooting platform related issues, Data backup, restoration, retention
Experience in creating content based on MITRE Framework
Exposure to SOAR, alert aggregation, automation, Playbook creation
ArcSight/LR rule base fine tuning, Ongoing log source modifications, Configuration/policy changes, General SIEM Administration, SIEM Content Development
Troubleshooting of an incident within IT Security incident response teams of SOC.
Maintains awareness of new and emerging cyber-attack threats with potential to harm company systems and networks. Devises and implements countermeasures to mitigate potential security threats.
Assists with the development and maintenance of IT security measurement and reporting systems to aid in monitoring effectiveness of IT Security programs.
Assists with the development, revision, and maintenance of Standard Operating Procedures and Working Instructions related to IT Security.
Good Coordination skills with various other teams for faster resolution/completion.
Good to have threat hunting knowledge.
Education/Skills
BE/B.Tech or equivalent with minimum 7-10 years of experience
Work experience of minimum 6 years in SOC Incident Handling, Incident Response Trend Analysis, administration/monitoring of SIEM Tool like ArcSight, LogRhythm SIEM, Threat Intelligence, Malware Analysis,
Ability to adapt and follow the processes and guidelines
Possess an impeccable work ethic and a high degree of integrity
Good Analytical & Problem Solving skills
Able to communicate with technical staff/management
Flexible to work after office and over weekend if required
Highly motivated & customer centric

Work arrangement
No