Security Operation Lead

Responsibilities:

• Deep understanding of cybersecurity best practices and threat landscapes
• Lead and manage the Red and Blue specialists, ensuring all members are trained, motivated, and working effectively together
• Proficiency in threat intelligence, incident detection, analysis, and response
• Oversee incident response efforts, ensuring timely and effective handling of security incidents
• Manage SOC tools and resources, ensuring they are up-to-date and effectively utilized
• Report to the Cybersecurity Head on security operation activities, performance, and any notable incidents or threats 

Technical Skill sets:

• At least 5 years of working experience of Cisco firewalls, proxy systems, load balancers, web application firewalls, SIP Infrastructure and Database Management - On Premise and on AWS Cloud
• At least 3 years of working experience in building, maintaining, and operating Security Information and Event Management (SIEM) technologies (e.g., Splunk, ArcSight, QRadar, ELK, Wazuh)
• A must of experience in developing data warehouse and Extract Transform Load (ETL)
• A must of Ability to create, correlate and analyze reports on security events and monitoring.
• Relevant certification is a plus