About this role
It's fun to work in a company where people truly BELIEVE in what they are doing!
We're committed to bringing passion and customer focus to the business. Position Objective (The purpose of role in current business/market scenario):
• We are seeking passionate cyber security professionals for our 24/7 security operations team, who will provide support to Halma Group’s centralized infrastructure. • Perform real time monitoring on malicious activities, analyse logs looking for attack patterns to ensure infiltration attempts are identified and dealt in a timely manner • He/she will be responsible for managing technical support requests pertaining to Security devices integrated in Halma’s infrastructure. • Provide first line of support for Halma and its subsidiary company infrastructure security. Responsibilities (KRAs / deliverables / job expectations):
• Perform real time security monitoring and incident response activities across the networks, leveraging a variety of tools and techniques • Create and improve Incident Response Playbook • Perform post incident reviews to improve and tune Halma’s incident response capability • Provide support to the team members while investigating alerts escalated by MSSP & work closely with Leads. • Provide support in the area of Azure Active directory, Intune (conditional access/MDM), single sign on and Multifactor Authentication, Microsoft Defender for Endpoint, Microsoft Defender for Server, Office 365 email security. • Monitor and respond to security incidents for Halma PLC and Subsidiary companies. Interact with end-users and IT Managers of Halma and Subsidiary companies during investigations, to raise awareness and training opportunities. • Create and Maintain KB articles & SOPs for all the applications related to SOC to ensure security best practices in the team. • Should be able to work on Incident and Security Reports Independently. Critical Success factors (critical / high impact aspects of role):
• Successfully resolve security incidents, infrastructure support & service requests within SLA. • Contribute to improving processes, systems and services provided by Halma IT. • Identification of Security Risks and threats to the Group. • Cyber security mindset is key and taking appropriate action on any cyber incident is the major aspect of this role. Academic qualification:
• Bachelor’s in computer science/IT • Preferred Certifications: • CompTIA Security+, CEH • Microsoft Security certifications like SC-200/SC-300/SC-400
• Desirable Certifications: • any SIEM certifications, any Network certifications
Experience (exposure):
• Total experience 2-3 years • Exposure to security technologies including Incident Response, Microsoft Defender, Azure Sentinel. • Knowledge of network fundamentals TCP/IP, SSL/TLS, DNS, DHCP. • Hands on experience to Microsoft technologies like 365 ATP Defender, Endpoint Manager (Intune- conditional access/MDM/MAM) and KQL knowledge. • Any vendor firewall and Remote Access solutions. • Good to have – Cato Networks (VPN and Firewall), Azure Active Directory, Data leak prevention technologies. Key attributes (critical functional competencies):
• High integrity • Diligent • Honesty • Great communication • Great Team Player Competencies (fundamental skills and attitudes):
• Good documentation skills • Good written and spoken English is a must • Excellent problem-solving skills • Effective communication with business stakeholders • Broad range of technical skills, with a focus on Security and Risk • Must be willing to mentor other Team members to grow as a team. If you like wild growth and working with happy, enthusiastic over-achievers, you'll enjoy your career with us! Not the right fit? Let us know you're interested in a future opportunity by clicking Introduce Yourself in the top-right corner of the page or create an account to set up email alerts as new job postings become available that meet your interest!