Security

This is level 2 role and would be responsible to support SIEM Management & content management for SIEM detection use-cases for the program. They would be overlooking technical services delivery for SOC program for your enterprise.If you thrive in a dynamic, reciprocal workplace, IBM provides an environment to explore new opportunities every single day. And if you relish the freedom to bring creative, thoughtful solutions to the table, there's no limit to what you can accomplish here.ResponsibilitiesGood knowledge of SIEM, SIEM Architecture, SIEM health check.SIEM Rule creation and fine tuning, Deployment of SIEM in customer environment.Define and design criticality of SIEM rules in line with customer ask and threat Intel advisory.Troubleshoot issues regarding SIEM and other SOC tools.Good verbal/written communication skills.Build of use case for the customer, Parser management and customer  log sources.Data archiving and backup and data purging configuration as per need and compliance.Raising change management tickets for SOC Administration activities like Patch upgrade for SIEM, onboarding log sources etc.Helping L2 and L1 with required knowledge base details and basic documentations.Co-ordination with L2 and SOC Monitoring team for troubleshooting issues and highlighting them to clients for further resolution and escalation.Work in a 24x7 Security Operation Centre (SOC) environment