Lead Consultant, IT Security Permanent NEW

Lead Consultant, IT Security
This role is to provide support to Singtel ASOC SIEM Engineering team, and assist the Service Delivery Managers with customer deliverable delivery.
Responsibilities:

• Manage customers’ appliances e.g. software up to date, manage user access
• On-boarding of new log sources physically on assigned workstation at controller site
• Upgrade of both Smart Connector and Logger to the supported version physically at Production & DR Data Centre
• Build, configure, and deploy SIEM solution and ensure devices are onboarded correctly
• Build, configure, and generate monthly security report on specifically designated customer projects
• Build custom parsers, use cases, rule sets
• Support change requests, change management
• Support SOC operations and requests
• Decommissioning of log sources as required
• Perform BCP Exercise at Production & DR Data Centre
• Perform Password Change Exercise physically on assigned workstation at controlled site
• Ad-hoc onsite support such as checking on log sources and configuration of weekly ITSO Log
  review reports
  Maintain and upkeep existing SIEM infrastructure
• Review Quarterly Port Scan Findings and perform remediation
• Work with Project Managers on specifically designated customer projects
• Assist and escort vendors with collecting logs, sanitizing logs, gathering info, RMA processes
• Oversee and manage upgrades to ensure minimum impact to operations (24/7)

Requirements:

• Be able to travel to customer sites to perform the responsibilities assigned
• Experience with any of the SIEM solutions, preferably Micro Focus ArcSight
• Experience in scripting skills like Bash, Python
• Use TCP/IP networking skills and technical knowledge in one or more security products
• Excellent analytical thinking and problem solving skills
• Strong oral (phone) and written (email) communication skills
• Self managed and team oriented
• Deadline and detail oriented

Must have basic knowledge in some of the following:

• Windows / Unix / Linux Operating System Configuration & Troubleshooting
• TCP/IP Networking Configuration & Troubleshooting
• Cloud Solutions like AWS, MS Azure
• Network Security Architecture Design
• Firewall Policy Design & Management
• Understanding of other security solutions like EDR, DLP, PIM