DesignationASSOCIATE CONSULTANTNo. of Positions4Experience2.5-5 YearsSkill (Primary)INFORMATION SECURITY-ANTI VIRUS-MCAFEE - AntiVirusQualificationB-TechJob Description (Posting)."Job Duties & Responsibilities: Monitor, analysis and basic understanding on SOC tools like Backstory, Mcafee ESM. Monitor, analysis, prepare remediation plan of threats (Advanced threats, Virus/spyware, Botnets etc.) related to Zscaler Internet Access. Creation and Review of current SOP docs. Scanning, and report sharing of Vulnerability. Need a team of individuals to support security compliance activities for Labs in NCR The task include but not limited to: Support ePO infrastructure for the labs. Any changes within ePO setup. So need a technical expertise on McAfee (but not all of them but couple technical resources) Support deployment of Carbon black in Lab machines and help in debugging. Knowledge of Carbon Black as a tool. But I do not think they will have to support the CB server infrastructure (Kumaran ). Support the process to help Lab owners make their machines compliant. Some basic technical knowledge and debugging skills needed. The regular tasks will include but not limited to: Look at the Incidents in Service Now and action that Help lab owners to debug the issue why McAfee AV or Carbon Black or ForeScout clients are not getting deployed or causing errors. Regular day-to-day activities related to Lab machines. Monitoring ePO/CB console to identify gaps between asset inventory and actual deployment and close the gap i.e. deploy AV/CB on machines that do not have it. Monitor ePO to look at infected machines and follow up to make sure the machine is clean. Identify and resolve security threats to safeguard information systems Define access privileges to protect systems Implement and maintain security controls Perform penetration tests Identify security breaches and follow response protocols Assess current security risks and implement improvements Conduct periodic audits to detect security violations and inefficiencies Prepare performance reports and communicate results to stakeholders Monitor network traffic for security incidents and events Investigate incidents and respond to events in real time Write detailed incident response reports Install and operate firewalls, encryption programs, and other security software Fix vulnerabilities Develop and promote best practices for information security Conduct threat research Perform periodic risk assessments and penetration testsMinimum Requirements: Bachelor s degree in computer science (or related area) preferred. Microsoft Certification (MCSE) or equivalent certification in relevant programs desired. Advanced knowledge of Windows Server (2012/2016) /desktop Operating Systems Managing in excess of 50 Windows Server infrastructure Strong communication and documentation skills Flexible and able to adapt to a rapidly changing environment Must be organized and have the ability to manage projects of varying length Positive, self-motivated individual who can complete tasks independently Must be a team player Excellent Communication" (1.) To clearly understand the client's cybersecurity environment and respective product. (2.) To monitor, configure, and troubleshoot cybersecurity issues and related monitoring tools (3.) To analyse and validate cybersecurity incidents in-detail and help the L3 team with RCAordata or logs collection (4.) To enable knowledge transferortrainings through creationor maintenance of configuration documents, test plans, operational manuals and provide operational training to L1 team. (5.) To analyse and fine-tune cybersecurity policies, participate in cybersecurity review calls pertaining to change requests and recommendations on cybersecurity policy changes. (6.) To implement changes, monitor security device performance and implements performance tuning
