soc Software DeveloperNityo Infotech, Inc.

As a member of the overall Information Security Team, the key responsibilities are:
Develops, designs, test and implements security application systems to support operations and business requirements.
Develops methods and approaches to improve security application systems process and performance.
Performs maintenance updates and enhancements to internally developed applications to suit changes in operation and business requirements.
Work effectively with Security Operations Center, US Cybersecurity Architects, Applications team and other groups.
Develops tools to actively find and remove intruders within the company's Information systems
Develops tools to actively monitor and take corrective action on issues detected in the critical security systems
Develops tools for Detection, monitoring, analysis, resolution of security incidents
Develops offensive countermeasure tools to deceive and misdirect attackers
Actively initiates containment activities
Coordinates escalations to internal support teams to ensure timely delivery of incident resolutions
Performs network/system/application/log intrusion detection analysis and trending
Under direction, performs tuning of the SIEM filters and correlations to continuously improve monitoring
Initiates and participates in the security incident handling efforts in response to a detected incident, and coordinate with other stakeholders
Ensures that Service Level Agreements are met
Maintains standard operating procedures, processes and guidelines
Automates security analysis, administration and remediation procedures, workflows and tasks
Maintains awareness of trends in security regulatory, technology, and operational requirements
Participates in systems audits
Reports to a Security Operations Center Supervisor
Shift rotation will be required for this role.
Required:
Thirst for knowledge, inquisitive nature, and keen interest in actively participating in SOC expansion \
Experience in software development fundamentals and programming.
Proven ability to troubleshoot and resolve data, system issues and performance issues.
Experience or specialized in IT/Computer - System/Database Admin or equivalent.
SIEM experience with ELK is Desirable
Knowledge of application security including web applications, web services, XML, SOA, AJAX, JSON, and web scanning tools
Can work under pressure due to limited development time schedule.
Knowledge of: Linux, SQL, Perl, Python, C++, C, Java, HTML and other scripting languages.
Experience working in an IT Security Operations Center, using SANS methodology
Experience and extensive knowledge of Security Information Event Management
Experience in Intrusion Detection or Prevention Systems
Knowledge of: TCP/IP, computer networking, routing and switching
Experience in Linux/UNIX and Windows based devices at the System Administrator level
System log forensics (Syslog, Event Viewer)
Strong troubleshooting, reasoning and problem solving skills (must score 80% or higher on a company administered pattern analysis test)
Team player, excellent communication skills, good time management
Organizational skills and the ability to work autonomously with attention to processes
Ability to speak and communicate effectively with peers, management and clients
Ability and experience in writing clear and concise technical documentation
Ability to fluently speak and write in English:
Experience/training in security penetration testing
Experience/training using ticketing systems
Security certifications: SANS/GIAC (GCIH, GCIA or GCUX), CCNA, CISSP, or CISA certifications would be assets
Knowledge of: Strong Authentication, End Point Security, Internet Policy Enforcement, Firewalls, Web Content Filtering, Database Activity Monitoring (DAM), Public Key Infrastructure (PKI), Data Loss Prevention (DLP), Identity and Access Management (IAM) solutions
Knowledge of NIST, PCI, HIPAA, ISO frameworks
We wish to thank all applicants for their interest and effort in applying for this position, however, only candidates selected for interviews will be contacted.
Skills
Software Development
System Administration
Incident Management
Information Assurance
Security
Bossjob

Mandaluyong City, Metro Manila
Permanent
Full-time