IN
Job Description
Job Overview:
- Cisco Firewall Job Description
- Extensive proficiency in
- Cisco ASA 5500 5500 X series
- Cisco Firepower Threat Defense (FTD)
- Cisco Firepower Management Center (FMC)
- Practical experience with
- Static and Dynamic PAT NAT
- Access Control Lists (ACLs) and security zones
- TCP/IP routing including BGP and OSPF fundamentals along with switching
- Thorough understanding of
- Firewall policies and rule management lifecycle
- VPN technologies such as IPsec and SSL VPN
- Experience with troubleshooting utilities including packet capture, logs, and debugging
- Familiarity with Snort IPS, URL filtering, and malware protection
- Experience with Security Information and Event Management (SIEM) tools like Splunk, QRadar, or Sentinel is an advantage
- Strong knowledge of networking principles and protocols
- Additional Qualifications
- Preferred Cisco certifications including
- o CCNA, CCNP Security
- o Cisco Firepower certifications
- Experience in cloud security with Azure and AWS firewall integration
- Basic scripting knowledge in Python and Ansible for automation tasks
- Awareness of compliance frameworks such as ISO 27001 and NIST
- Infrastructure Virtual Machine Job Description
- Web, Mobile, API, Network, and Cloud Vulnerability Assessment and Penetration Testing (VAPT)
- Familiarity with OWASP Top 10 and SANS 25 secure Software Development Lifecycle (SDLC)
- Utilization of tools such as Burp Suite, Nmap, Nessus, Metasploit, OWASP ZAP, Frida, and Objection
- Security reporting, risk ratings, and remediation recommendations
- Exposure to SIEM tools and foundational AWS security practices
Core Responsibilities:
- Security Operations Center (SOC)
- Minimum experience in managing Information Security operations, particularly in a large security operations center utilizing IBM QRadar, Splunk, ArcSight, or comparable SIEM tools
- Oversee network endpoints, forensic initiatives, malware triage, and cyber security incident response efforts
- Manage Cyber Security Services engagements and the related teams
- Identify common attacker tools, tactics, and procedures
- Provide guidance for on-site examinations, evidence collection, and technology advisory services to improve forensic client interactions
- Research and innovate new digital forensics scripts, tools, and methodologies
- Evaluate and resolve a range of technical issues, supporting a cyber response lab on the clients' SIEM tool and UEBA platform
- Assist in peer reviews and quality assurance assessments for junior staff and mentor junior incident managers, offering insights into incident management priorities, triage, and report writing for on-site engagements
- Lead the team in monitoring, identifying, and investigating security alerts while executing incident response activities linked to cybersecurity events
- Create new trouble tickets for alerts indicating an incident requiring Tier 2 Incident Response evaluation
- Address cybersecurity incidents by conducting threat analysis as directed and resolving identified incidents
- Demonstrate multitasking capabilities to coordinate incidents with Senior analysts and escalation managers
- Propose improvements to SOC security processes and operational efficiencies
- Develop Incident Response (IR) plans and playbooks, managing all incidents and crisis situations
- Conduct log analysis to handle and resolve security incidents
- Collaborate with relevant technical teams for incident remediation
- Regularly review the incident response plan and procedures
- Recommend and document specific countermeasures and mitigation strategies
- Produce comprehensive and precise reports and presentations for both technical and executive audiences
- Additional Qualifications
- Strong understanding of cyber threats and techniques, as well as Cyber Kill Chain and incident management best practices
- A comprehensive understanding of multi-tier applications and various network and security device protocols
- Familiarity with multiple operating system platforms, including but not limited to Windows, Linux, and Unix
- Skilled in the preparation of reports and documentation