SOC Lead

The SOC Lead will be responsible for administering and operating various security tools, including ArcSight SIEM, EDR, AV, and Email Security. The role requires a strong understanding of the MITRE framework and the ability to develop use cases for anomaly detection. The SOC Lead will also lead various modules within the Security Operations Center, including Threat Hunting and Threat Intelligence.

Requirements

• ArcSight SIEM administration and operation management
• EDR, AV, and Email Security administration and operation management
• Content creation on SIEM to cover all stages of MITRE
• EDR, CSPM, and MDO policy fine-tuning
• Custom/unsupported devices integration with ArcSight SIEM
• Log analysis and use case development for anomaly detection
• Leadership of various modules within the Security Operations Center