Contract To HIRE - Chronicle Engineer

Job Description

Required skills
• Bachelor of engineering or Science in computers, information systems, information security, Math, decision sciences, risk management, or other business/technology disciplines or equivalent work experience.
• CISSP, CEH or equivalent.
• Able to work in shifts on a rotating basis for 24X7.
• Three to five years experience in security information and/or technology engineering support.
• Experience with the following technologies: leading SIEM technologies (SplunkQradarLogRhythmNitroChronicle) IDS/IPS, network- and host-based firewalls, data leakage protection (DLP), common EDR platforms etc.
• Understanding of possible attack activities such as network probing/ scanning, DDOS, malicious code activity, exfiltration, credential access, etc.
• An understanding of the Cyber Kill Chain, the MITRE attack framework, various TTPs described within and commonly used by attackers as well as how to write detection rules for them in SIEM and EDR solution.
• Understanding of tools, technologies and logging mechanism including understanding to common network devices such as routers, switches, load balancers etc.
• Understanding of typical cloud threats and knowledge of how to detect and prevent them, cloud logging and audit capabilities and the ability to develop detection rules around these
• Understanding of basic networking protocols such as IP, DNS, HTTP, and the network stack
• Basic knowledge in system security architecture and security solutions
Preferred skills
• Excellent interpersonal and organizational skills
• Excellent oral and written communication skills
• Strong analytical and problem-solving skills
• Self-motivated to improve knowledge and skills
• A strong desire to understand the what as well as the why and the how of security incidents

Keyskills :
integration log sourcesnetwork- host- based firewallswriting parserschronicle siemids/ips