Job Description

DesignationASSOCIATE CONSULTANTNo. of Positions1Experience2.5-5 YearsSkill (Primary)INFORMATION SECURITY-ACCESS Gov. IMPLEMENTATION-IBM SECURITY IDENTITY Gov. ImplementQualificationB-Tech (Posting)."
Department SOCPurpose In this role you will be working as part of a SOC team providing delivery support for customers. You will work as part of a team focused on security operations principles and optimization with an emphasis on security incident and event monitoring (SIEM). While the job will predominantly involve delivery work for customers, you will also be expected to participate in pre-sales engagements alongside account executives in the region. You will be working as part of a team with a shared responsibility to further developing programs for customers centered around SIEM and SOC. You will lead presentations with technical fluency and be able to answer customer questions in multiple areas of SOC/SIEM. You will also be writing technical documentation and occasionally give technical presentations as a SOC/SIEM subject matter expert.Performance Metrics
Financial Customer
Customer satisfaction index
Time to close customer complaints through SOP based solutions
SLA adherence
No. of customer escalation
Direct customers end user calls, Customer vendor and partners interactionProcess People
Minimum repeat failures
Minimum configuration errors
Variance to committed schedule and timeline
Effectiveness in induction process of any new client No. of new technologies mastered
No. of new certifications
Flexibility to take new responsibility and roleKey Responsibilities
Strategic Ensure knowledge creation and documentation.
Suggest changes/improvement in existing operations to enhance technical capability within the team.
Customer Incident management and change management
Ensuring maximum customer satisfaction for direct customers
Ensure compliance to SLA s (Incidence response, security alerts, reports availability, uptime)
Minimizing customer complaints for direct customers.
Ensure quick resolution of all customer complaints (SOP) and help peers to achieve the same.
Ensuring time bound and effective communication with the customer.
Process Ensuring compliance to delivery schedules (reports, scheduled activity etc)
Ensure self-compliance to service quality and process adherence.
Ensuring compliance to SOP / guideline during configuration / troubleshooting, to minimize repeat error / downtime.
People Should continuously enhance skill set / expertise, by acquiring knowledge / certification on new technology and products.
Should share knowledge and experience with the peers and within the group
To be flexible to take up any related responsibility and roles, as per the organization requirement.
Technology Security Incident and Event Monitoring technology support for vendors tools such as Splunk Cloud Enterprise, and/or Microsoft Sentinel
Security Operations Center experience in the following areas:
Playbook design and editing
Workflow process creation
Alert and incident response
SIEM deployment, administration, and architecture design
SOAR experience in deployment and architecture design preferred
Experience with Insider Threat program design and implementation preferred
Understanding of EDR, NDR, and next gen firewall alerts and logging criteria in a security operations center.Capability RequirementsFunctional Skills Primary Skills:
Senior security operations analyst/engineer with at least 6 years experience in security operations with emphasis on but not limited to the following technical criteria:
SIEM (security incident and event monitoring) administration, deployment, and/or architectural design on-premise/cloud based
Data analytics (cloud based experience preferred)
Security orchestration automation and response with playbook/workflow/process design and implementation
Familiarity with cybersecurity tools f

HCLTech