Associate SOC Engineer 2

Job description

about the role

1) Primary responsibility is to provide Tier 1 network security support CyerbSOC Operations supporting multiple customers
2) This position interfaces with external clients and is highly visible
3) Responsible for general architecture, initial configurations and subsequent management of CyberSOC operations

4) Provide 24X7 production support to accept, operate, and maintain security elements. There are off shift activities and pager rotation.

5) Troubleshoot end to end network security issues
6) Conduct risk assessments on all work performed
7) Conduct daily, weekly, and monthly proactive maintenance activities including configuration changes and code upgrades per business directive
8) 2-4 years of experience
9) Experienced in analyzing and interpreting various kind of logs in order to diagnose Incidents, to detect abnormal behaviors/patterns. Performs Threat and vulnerability identification, classification, and analysis, including on-going research into emerging threats.

10) L1 support for customer for proactive and reactive incident management

about you

1) SIEM - Arcsight, Qradar
2) VM - Qualys
3) DDOS - Arbor
4) Threat detection/malware detection
5) Web filtering, Endpoint protection tools, and  IPS/IDS
6) Email Security

additional information

Responsibilities:

In line with our ITIL based processes and organization, you will be in charge to follow Orange internal processes and manage:-

Incident management =>

- handle both re-active (customer call) and pro-active (monitoring) incidents

- troubleshoot and fix all incidents in close relationship with all people involved in the fault resolution process: level 1 (CTS2, DCSC, …), IT CSM, field operations, supplier helpdesk, Infrastructure and Engineering teams

- provide root cause analysis (RCA)

Ability to work in a virtual team environment

Problem management=>

- involved in problem management as the owner of the technical resolution

Change management =>

- handle standard change request, according to our change control and risk review process

- handle complex change requests, providing technical expertise and reporting to the change advisory board (CAB) as appropriate

Security Incident and Event Management

- monitor and respond to alarms and alerts from the SIEM and IDP solutions (triage / notification / recommendation / etc …)

- working closely with Technical Operations Owners / Security Managers and with the customer/customer SOC, to manage incident response coordination and follow-up

department

Customer Services & Operations

Orange Business Services manages and integrates the complexity of international communications, freeing our customers to focus on the strategic initiatives that drive their business.  Our extensive experience and knowledge in global communication solutions, together with our understanding of multinational business and local support in 166 countries and territories, ensure that our customers receive a consistent, global solution wherever they do business.

contract

Regular