Associate Manager, Cyber Threat Intelligence and SOC

Provide dedicated SOC monitoring (24x7, by rotation/on-call) and analysis of cyber security events using a variety of tools and techniques to investigate, navigate, correlate and understand security incidents to Incident response (IR).

Review and triage information security alerts, provide analysis, determine and track remediation, and escalate as appropriate. Ensure data feeds are continually available and trustworthy. Provide threat and vulnerability analysis and incident reporting.

Provide support for the log management and security information and event management (SIEM), Security Orchestration and Automation Response (SOAR), Threat Intelligence Platform (TIP) solutions, etc.

Manage and support the log collection, security scanning, intrusion detection, content filtering, and other security-related systems.

Analyze and respond to previously undisclosed vulnerabilities. Investigate, document, and report on information security issues and emerging trends. Support Enterprise Vulnerability Management program.

May perform other duties assigned including work in other areas to cover absences or relief to equalize peak work periods or otherwise balance the workload.