gds consulting_senior security Automation Engineer - sentinelEya Gth Manila

At EY, you'll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we're counting on your unique voice and perspective to help EY become even b At EY, you'll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we're counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all. As part of our EY-cyber security team, who shall work as Security Automation Engineer who will assist clients in detecting and responding to security incidents with support of their SIEM and security solutions and improve processes through automation and orchestration. The opportunity We're looking for Security Automation Engineer with expertise in SOAR and SIEM solutions. This is a fantastic opportunity to be part of a leading firm whilst being instrumental in the growth of a new service offering. A Security Automation Engineer has the primary role of analysing and implementing cyber security use cases to be automated. This entails configuring connections between applications either thru web services or other network technologies, Another expectation is to support and mitigate production issues on existing automated workflows. One must also be comfortable in working independently. You should have a good understanding and knowledge on Security Operations and Incident Management. Your key responsibilities . Implement technical configurations of different security tools involved. . Develop automated playbooks to cater for their cyber security use cases. . Support and mitigate production issues. . Assess and deliver automating and orchestrating SOC/IR processes. . Understand an existing SOC/IR process and enhance as necessary. . Review, assess, benchmark and develop issue remediation action plans for all aspects of an engagement. . Expertise in using SIEM solutions (Splunk, LogRhythm, Sentinel) and cloud security monitoring platform (Azure/AWS) for various customers. . Perform as the subject matter expert on SIEM and SOAR platforms for the customer, use the capabilities of the solution in the daily operational work for the end customer. . Advise customers on best practices and use cases on how to use this solution to achieve customer end state requirements. . SIEM and SOAR content development which includes developing process for automated security event monitoring and alerting along with corresponding event response plans for systems . Publish weekly and monthly reports to the clients. . Provide both strategic analysis and near real-time auditing, analysing, investigating, reporting, remediation, coordinating and tracking of security-related activities for customer Skills and attributes for success . Experienced developer with at least 2 yrs of experience using Python programming language, REST API and JSON. Must have basic SQL knowledge. . Experience in SOC/Incident Response for at least 2 years . Splunk ES/SOAR, IBM QRadar/SOAR, MS Sentinel, Siemplify and other similar platforms . Have been involved in an end to end Software Development . Customer Service oriented - Meets commitments to customers Seeks feedback from customers to identify improvement opportunities. . Experience in cloud native security platforms - Splunk, Microsoft Sentinel and platforms alike . Good knowledge of SIEM technologies such as Splunk, Azure Sentinel from an Analyst's point of view and cloud security monitoring platforms on AWD and Azure . Good knowledge of SOAR technologies such as Splunk Phantom, Azure Sentinel, Logic Apps, Palo Alto XSOAR, IBM SOAR, etc . Troubleshoot problems associated with SIEM/SOAR solution. . Ability to work with minimal levels of supervision or oversight. . Good knowledge and experience in Cyber Incident Response To qualify for the role, you must have . . Sufficient knowledge in business industry standard security incident response life cyle . Well-versed and/or skilled in all or some of the following Applications: o Automation or Orchestration Tool (Demisto, Resilient, Blue Prism, UiPath, etc.) o Security Event and Incident Management Tools (ServiceNow, Splunk, etc) o Django o Unix o Powershell o FTP Client tools (WinSCP, FileZilla, etc) o Version Control (Git, SVN, Mercurial and the like) . B. Tech./ B.E. with sound technical skills . Ability to work in 24x7 shifts . Strong command on verbal and written English language. . Demonstrate both technical acumen and critical thinking abilities. . Strong interpersonal and presentation skills. . at least 4 yrs experience in IT Industry at least 2 yrs of experience in Python Development. Minimum 4 years of Hands-on experience of operating/implementing SIEM/SOAR solutions. . Certification in any of the SIEM/SOAR platforms . Knowledge of RegEx, Perl scripting and SQL query language. . Certification - CCSA, CEH, CISSP, GCIH, GIAC. Ideally, you'll also have . People/Project management skills. . Have been involved in an end to end Software Development . Experience in Process Development, Process Improvement, Process Architecure, and Training . Experience with Unit and End to End testing . Experience in Agile Methodology . Quick to apprehend and adapt new applications. . Good grasp in conceptualizing and/or implementing automation for business process workflows . Knowledgable in Cybersecurity and Incident Response Management . Fluency in verbal and written communication What we look for . Who is a SOAR/SIEM expert and work as Security Automation engineer for in-depth incident analysis and response with experience and deep knowledge in Security Operations and Incident Management. EY | Building a better working world EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets. Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate. Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.
Monster

Taguig City, Metro Manila
Permanent
Full-time