Security Architect

Job description
Project Role :Security Architect


Project Role Description :Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.
Must have skills :Security Information and Event Management (SIEM)

Good to have skills :NA
Minimum 2 year(s) of experience is required

Educational Qualification :Btech with Equivalent certification

"Responsibilities:Lead / Coordinate security investigations and Incident Response.Maintain playbooks and develop comprehensive and well-structured incident reports.Build scripts, tools, and methodologies to scope and contain infected assets.Partner closely to work and provide updates to Lucid Legal Counsel, HR, Cloud, and data teams.Create and improve detections and threat signatures. o Participate in on-call rotation periodically which may involve non-traditional working hours. Required qualifications:3+ years of experience as a Security Engineer, Security detections/signature development and/or SOC Analyst.Strong experience in IR, security investigations, and running incidents as the incident commander.Experience using investigative tools such as EDR, DLP, SIEM, UEBA and SOAR.Excellent understanding of cloud security.Significant experience leading security projects.Knowledge of network and web protocols, and an in-depth knowledge of Linux/Unix tools and architecture.Excellent interpersonal skills for cross-functional collaborationToolsSplunk Enterprise security & ServiceNow must/mandatory, CrowdStrike, ExtraHop, Exa beam, Qualys preferred "QualificationBtech with Equivalent certificationRole: Security Architect / Consultant,Industry Type: IT Services & Consulting,Department: IT & Information Security,Employment Type: Full Time, PermanentRole Category: IT SecurityEducationUG: B.Tech/B.E. in Any SpecializationPG: Any PostgraduateKey SkillsSkills highlighted with ‘‘ are preferred keyskillsevent managementcloud securityirsiemsecurity solutionsbeamsocsplunk enterprise securitydlpnetworkingedrservicenowsecurity engineeringlinuxsoaruebasplunkqualyscrowdstrikeunixarchitecturesecurity information and event management