Security Support Analyst

Benefits

Additional Information

It's fun to work in a company where people truly BELIEVE in what they are doing! We're committed to bringing passion and customer focus to the business. Position Objective (The purpose of role in current business/market scenario): We are seeking passionate cyber security professionals for our 24/7 security operations team, who will provide support to Halma Group's centralized infrastructure. Perform real time monitoring on malicious activities, analyse logs looking for attack patterns to ensure infiltration attempts are identified and dealt in a timely manner He/she will be responsible for managing technical support requests pertaining to Security devices integrated in Halma's infrastructure. Provide first line of support for Halma and its subsidiary company infrastructure security. Responsibilities (KRAs / deliverables / job expectations): Perform real time security monitoring and incident response activities across the networks, leveraging a variety of tools and techniques Create and improve Incident Response Playbook Perform post incident reviews to improve and tune Halma's incident response capability Provide support to the team members while investigating alerts escalated by MSSP & work closely with Leads. Provide support in the area of Azure Active directory, Intune (conditional access/MDM), single sign on and Multifactor Authentication, Microsoft Defender for Endpoint, Microsoft Defender for Server, Office 365 email security. Monitor and respond to security incidents for Halma PLC and Subsidiary companies. Interact with end-users and IT Managers of Halma and Subsidiary companies during investigations, to raise awareness and training opportunities. Create and Maintain KB articles & SOPs for all the applications related to SOC to ensure security best practices in the team. Should be able to work on Incident and Security Reports Independently. Critical Success factors (critical / high impact aspects of role): Successfully resolve security incidents, infrastructure support & service requests within SLA. Contribute to improving processes, systems and services provided by Halma IT. Identification of Security Risks and threats to the Group. Cyber security mindset is key and taking appropriate action on any cyber incident is the major aspect of this role. Academic qualification: Bachelor's in computer science/IT Preferred Certifications: CompTIA Security+, CEH Microsoft Security certifications like SC-200/SC-300/SC-400 Desirable Certifications: any SIEM certifications, any Network certifications Experience (exposure): Total experience 2-3 years Exposure to security technologies including Incident Response, Microsoft Defender, Azure Sentinel. Knowledge of network fundamentals TCP/IP, SSL/TLS, DNS, DHCP. Hands on experience to Microsoft technologies like 365 ATP Defender, Endpoint Manager (Intune- conditional access/MDM/MAM) and KQL knowledge. Any vendor firewall and Remote Access solutions. Good to have - Cato Networks (VPN and Firewall), Azure Active Directory, Data leak prevention technologies. Key attributes (critical functional competencies): High integrity Diligent Honesty Great communication Great Team Player Competencies (fundamental skills and attitudes): Good documentation skills Good written and spoken English is a must Excellent problem-solving skills Effective communication with business stakeholders Broad range of technical skills, with a focus on Security and Risk Must be willing to mentor other Team members to grow as a team. If you like wild growth and working with happy, enthusiastic over-achievers, you'll enjoy your career with us! Not the right fit? Let us know you're interested in a future opportunity by clicking Introduce Yourself in the top-right corner of the page or create an account to set up email alerts as new job postings become available that meet your interest!