SOC Analyst

Duration: 12 Month

Location: NY Hybrid

The consultant will be responsible for following activities:

The CSIRT Consultant has a wide spectrum of responsibilities and will be responsible for following activities (but not limited to) in day-to-day work:

Identifying and detecting Incidents and taking immediate action on security incidents including (and not limited to) DoS attacks, malware attacks, phishing attacks, web attacks;

End to end ownership in driving and leading Security Incident Response and Resolution activities;

Participate and support performing forensics investigations as required to respond to the Security Incidents;

Responding to Security Threats and Intelligence alerts & notifications from Group CERT, Regional Regulators and authorized Threat Intelligence groups and ensuring appropriate preventive and detective actions are coordinated and deployed in liaison with IT Operations teams as per the defined approach and in timely manner;

Owning end to end coordination, communications and deployment of action plans for Threat Advisories or lesson learnt from Security Incidents;

Prepare detailed Incident Post-mortem report and Executive Summary to document the Security Incident chronology, root cause, remediation and lesson learnt;

Creating and updating the incident response plan (IRP) and playbooks and ensuring periodical review of playbooks to ensure the relevancy of response actions in current context, including updated information of all stakeholders involved;