Security Operations Center – L3 Expert

1 week ago Be among the first 25 applicantsWho We AreAt Kyndryl, we design, build, manage and modernize the mission-critical technology systems that the world depends on every day.So why work at Kyndryl?We are always moving forward – always pushing ourselves to go further in our efforts to build a more equitable, inclusive world for our employees, our customers and our communities.The RoleSOC L3 Expert supports clients in managing Security Operations and protecting environments against insider and external threats.The role requires an experienced security professional with proven expertise in SOC operations, Threat Detection & Response, Security Intelligence, Continuous Security Monitoring (CSM) within a SOC.Key ResponsibilitiesLead complex investigations and conduct deep analysis of security events focused on rapid containment, remediation, and mitigation.Lead in the detection, triage, analysis and response to cyber-attacks.Serve as a technical Cyber SME and onsite task lead.Provide insight and expertise to examine malicious code (malware), attack vectors, network communication methods, analyze threats against target systems and networks, determine target network capabilities and vulnerabilities.Training and mentoring Level 1 & Level 2 peers to improve SOC Analyst capability.Engage across the organization and partner with a diverse set of IT and business stakeholders, awareness of business needs for delivery and agility and to ensure security topics (operations, engineering, risk, compliance) are integrated and automated properly.Work with Cybersecurity, Information Technology Services teams, and others across the global business organization on practical implementation of SOAR and SOC Runbooks and Playbooks.Identify, monitor, and report on trackable metrics to improve processes, procedures, and overall operational security while minimizing business impact.Perform Security Operations maturity assessments, formulate roadmaps to bridge existing security gaps and help accelerate transformation toward SOC maturity.Review SOC Runbooks and Playbooks and determine if good practices are being followed, considering most common cybersecurity threats within clients' industries, business and geo locations.Review SOAR and XDR products utilized and determine if they are configured properly.Deploy SOC automation technology through SOAR, Case Management.Review Security Operations Runbooks and Playbooks through assessing SOC threat landscape, existing automations and providing recommendations to comply with SOC automation best practices, using applicable cybersecurity framework.A willingness to go beyond the ordinary to meet and exceed client expectations.Your future at KyndrylEvery position at Kyndryl offers a way forward to grow your career, from Junior System Administrator to Architect.We have opportunities for Cloud Hyperscalers that you won't find anywhere else, including hands-on experience, learning opportunities, and the chance to certify in all four major platforms.One of the benefits of Kyndryl is that we work with clients in a variety of industries, from banking to retail.Whether you want to broaden your knowledge base or narrow your scope and specialize in a specific sector, you can find your opportunity here.Who You AreYou're good at what you do and possess the required experience to prove it.However, equally as important – you have the growth mindset; keen to drive your own personal and professional development.You are customer-focused – someone who prioritizes customer success in their work.And finally, you're open and borderless – naturally inclusive in how you work with others.Required Technical and Professional ExpertiseBachelor's degree in Computer Science, Cybersecurity, Information Technology, or other related fields, from an accredited university.Equivalent professional experience can be used in lieu of a degree.Security analyst experience, preferably in a managed services environment.Experience on SOC operations (Standard Operations Procedures, Runbook and Playbooks).Experience threat hunting, proactively and iteratively searching to detect advanced threats that evade existing security solutions.Expertise in network, host, and cloud-based security, attack techniques, analysis, and investigation.Strong experience with Operating systems (Windows, Linux and MacOS) & IT Architecture.Deep understanding of a variety of logs coming from cloud, network or endpoint devices.Expert level understanding of advanced attacks and defense techniques.Experience in Cloud Security monitoring and in advanced analytics (UEBA).Experience with leading security incident response.Experience with triaging various disparate anomalies to detect meaningful threat scenarios.Sound experience on programming languages: Python and/or R. and/or PowerShell.Experience in REST API interfaces to support data collection or integration.Experience with Data monitoring / Data Science.Strong Understanding of the current cyber threat landscape, the different tactics commonly used by adversaries and how you would investigate, contain and recover against their attacks.Deep knowledge in the most common and used frameworks (E.g., NIST CSF, ISO****x, CMM SOC, etc.)Fluent English (written and spoken)Strong critical thinking and analytical skills and ability to think "out of the box" required.Must be able to work independently or with a team, under minimum supervision.Preferred Technical and Professional ExperienceMBA or master's degreeExperience with one or more of the following areas:Operation and Implementation of SIEM solutions including:XSIAM and Microsoft Sentinel.Operation and Implementation of Security Automation solutions including:Thorough knowledge of SOAR (Security Orchestration Automation & Response) technologies.Design and Implementation of Monitoring strategy including:Thorough knowledge on defining data sources monitoring based on clients' business.Thorough knowledge on MITRE Frameworks (ATT&CK, D3FEND).Familiar with Cyber Kill Chain.Design and Implementation of Configuration Governance solutions including:Thorough knowledge on how to operationalize ongoing security configuration governance service using SOC standard methodologies, metrics, KPIs, KRIs, Operational Procedures.Cyber Network Operations/Penetration Test Methodologies and tools like Metasploit, Kali Linux, Cobalt Strike etc.Being YouDiversity is a whole lot more than what we look like or where we come from; it's how we think and who we are.We welcome people of all cultures, backgrounds, and experiences.Kyndryl provides multiple ways to create a workplace where all Kyndryl employees can find and provide support and advice, ensuring everyone can bring their whole selves to work.What You Can ExpectWith state-of-the-art resources and Fortune 100 clients, every day is an opportunity to innovate, build new capabilities, new relationships, new processes, and new value.Kyndryl cares about your well-being and offers benefits that give you choice, reflect the diversity of our employees and support you and your family through the moments that matter – wherever you are in your life journey.Get ReferredIf you know someone that works at Kyndryl, when asked 'How Did You Hear About Us' during the application process, select 'Employee Referral' and enter your contact's Kyndryl email address.#J-*****-Ljbffr