L2 Security Operations

·         Incident analysis and resolution

·         Adding devices in the monitoring tool

·         Troubleshooting L2 incidents and closing incidents on the ITSM tool and updating the KB documentation.

·         Configuration changes as recommended by the L3 team

·         Log analysis and management – (move logs from log server to reduce memory consumption / resource utilization)

·         SNMP configuration on security devices.

·         Creating SOC tool User accounts

·         Creating user roles

·         Creating reports and basic dashboards

·         Monitoring fixing tool license Issues

·         Vendor coordination and Follow ups (e.g. RMA, TAC, patch upgrade)

·         Analyzing and reporting threats and attacks

·         Documentation / risk register / run book / SOP (verification)

·         Coordination with SME for RCA

·         SLA and KPI reports

·         Experience – 5-7  years

·         Checkpoint firewall (version R77.xx) :23 HA clusters

·         Cisco ASA 51xx series

·         Blue Coat Secure Web Gateway, CAS, Future = SSL-V appliance

·         FireEye ETP

·         Symantec

·         Tufin

·         SOC & Security Analysis reporting

·         Proofpoint

Shift 1 - L2 Support (8:00am to 5:00pm EST)

Shift 2 – L2 Support (5:00pm to 1:00am EST)

Shift 3 – L2 support (1:00 am to 9:00 am EST)

Offshore