Our SIEM & Automation team works closely with other security analysts to deliver security content to monitor security threats, and automate the escalation / response for our customers. You will play a part in the team to research, design, architect and implement security use case and automation playbooks.

If you are someone with a strong passion in security technologies and is a team player who strives in a team setting, we welcome your application!

Key Responsibilities

• Carry out implementation, maintenance, support and operation of the project's security monitoring use cases and automation playbooks.
• Maintain understanding of the architecture and work with security team to understand the use case and playbooks to be created.
• Identity, evaluate and recommend new areas of improvements for the implementation.
• Perform day to day operational task, scheduled change requests, troubleshooting and maintenance of the implementation.
• Create, finetune and maintain SIEM data sources, use cases, correlation rules and security alerts classifications
• Create, finetune and maintain SOAR playbooks
• Create and maintain UEBA use cases

Requirements

• At least 3 years of experience in security operations in a SOC environment
• At least 2 years of experience in creating, finetuning and maintaining correlation rules and playbooks
• Working experience in powershell, bash and/or python scripting
• Strong troubleshooting and analytical skills for resolving issues and delivering updates to stakeholders
• Basic project management skills
• Positive working attitude and a team player
• Passionate in information security and keen attitude to learn
• Professional certificates such as AWS Certified SysOps Administrator Associate, Microsoft Azure Administrator Associate, GCP Associate Cloud Engineer, equivalent or more.
• Disciplines in Computer Science, Computer or Electronics Engineering, Information Technology or related qualifications
• Professional certificates such as SANS (such as SANS GCDA, GCIA, GDSA, GMON) would be an advantage

Responsibilities:

• Earn NEW annual recurring revenue with a primary focus on driving Microsoft Azure
• Recruit and develop sales relationships with new and existing channel partners to add new end-customer workloads to maximize consumption
• Work with targeted partners to develop their sales, marketing and technical readiness
• Proactively identify sales opportunities and close sales within your assigned base of partners
• Maintain a high level of expertise on Cloud offerings – including product schedules, technology benefits, pricing schedules, and certifications as needed
• Collaborate with a variety of internal resources including presales technical consultants, customer success managers, and post-sales support
• Execution of marketing programs, developing channel and end-customer demand generation
• Exceed quarterly sales targets by selling and increasing IaaS consumption into existing and new customer accounts
• Pipeline development through a combination of cold calling, email campaigns and market intelligence
• Creation of commercial proposals for the services and solutions we offer
• Identify cross-sell opportunities.
• Work closely with vendor team to drive collaboration and GTMs and provide timely updates on progress
• Represent Ingram Micro in vendor events and industry functions.

Qualification and experience:

• 3 years of B2B technology, preferably with cloud/IaaS technology; Google GCP knowledge a plus
• Knowledge of professional, effective telephone techniques, and sales skills
• Demonstrated understanding of strategic selling principles and order management
• Ability to dig deeper into an organization and take advantage of cross and upsell opportunities.
• Successful track record of new business sales, with the ability to prove consistent over achievement against targets.

Our SIEM & Automation team works closely with other security analysts to deliver security content to monitor security threats, and automate the escalation / response for our customers. You will play a part in the team to research, design, architect and implement security use case and automation playbooks.

If you are someone with a strong passion in security technologies and is a team player who strives in a team setting, we welcome your application!

Key Responsibilities

• Carry out implementation, maintenance, support and operation of the project's security monitoring use cases and automation playbooks.
• Maintain understanding of the architecture and work with security team to understand the use case and playbooks to be created.
• Identity, evaluate and recommend new areas of improvements for the implementation.
• Perform day to day operational task, scheduled change requests, troubleshooting and maintenance of the implementation.
• Create, finetune and maintain SIEM data sources, use cases, correlation rules and security alerts classifications
• Create, finetune and maintain SOAR playbooks
• Create and maintain UEBA use cases

Requirements

• At least 3 years of experience in security operations in a SOC environment
• At least 2 years of experience in creating, finetuning and maintaining correlation rules and playbooks
• Working experience in powershell, bash and/or python scripting
• Strong troubleshooting and analytical skills for resolving issues and delivering updates to stakeholders
• Basic project management skills
• Positive working attitude and a team player
• Passionate in information security and keen attitude to learn
• Professional certificates such as AWS Certified SysOps Administrator Associate, Microsoft Azure Administrator Associate, GCP Associate Cloud Engineer, equivalent or more.
• Disciplines in Computer Science, Computer or Electronics Engineering, Information Technology or related qualifications
• Professional certificates such as SANS (such as SANS GCDA, GCIA, GDSA, GMON) would be an advantage

Roles & Responsibilities

Responsibilities

• Maintain a deep understanding of DevOps practice, tools, and their architecture for on-premise and cloud projects delivery. (i.e. Ansible, Chef, Puppet, UIPath, Jenkins, Git, CodeCommit, Terraform, Packer, CloudFormation, Pulumi)
• Drive adoption of DevOps and Automation lifecycle with proper processes and versioning control.
• Implementing DevOps platform with best practices and framework for continuous delivery pipeline; meeting customer environment security requirements.
• Work closely with project leads to understand existing processes, issues, or requirements for DevOps practice adoption in different key areas. (i.e. Application Delivery, Application Integration, Infrastructure as a Code, Security Assessment and Remediation)
• Analyze, measure, and prioritize requirements for delivery.
• Develop playbooks, automation scripts, workflows for discussion and recommendation to meet the delivery requirements in sprints.
• Plan, develop, test, and implement the basic structure to aid project members in DevOps adoption in delivery of identified project requirements.
• Mentor and guide project engineers during their implementation and their continual practice during operations.
• Maintain DevOps technology stack for practice and training purposes (i.e. GIT, Kubernetes, OpenShift, Ansible, UIPath)
• Does active research on the new and emerging DevSecOps trends, practices, and technologies to meet market changes.
• Maintain strong interest and keen understanding of cybersecurity solutions and their delivery formats to customers.

Requirements

• Degree in Engineering, Computer Science/Information Technology or its equivalent;
• At least 5 years of experience in leading technical requirements and team for delivery as a technical lead;
• At least 3 years of experience and proficiency in DevOps and automation technologies;
• Able to demonstrate architecture and delivery principles for three or more of the following technologies or similar i.e. Ansible, Chef, Puppet, UIPath, Jenkins, Git, CodeCommit, Terraform, Packer, CloudFormation, Pulumi, Docker, Kubernetes, OpenShift
• Strong Linux and Unix operating system experience
• Excellent communication / stakeholder skills and emotional intelligence to influence key decisions, mediate conflicts and build consensus;
• Demonstrated ability to work with people at all levels within an organization;
• Thrives in ambiguous and complex environment with ability to analyse, make decisions and overcome show-stoppers/difficulties

The SIEM engineer will architect, implement, and maintain various SIEM solutions for our customers to support our security analysts. This role will primarily setup, maintain, and enhance various SIEMs.

• Configure and administer the SIEM to support the needs of SOC.
• Responsible for maintaining the health of the SIEM tool and ensuring agreed uptime of the respective platform.
• Perform regular patching and version upgrades on the SIEM platform.
• Configure respective parsers, forwarders (engage principal vendors if needed) to integrate various log sources with SIEM platform for log monitoring.
• Research, build, and maintain detection capabilities for the latest threats across SIEM, log analytic, and security tool platforms.
• Ensure real time data and Configuration replication between Primary and DR sites.
• Integrate data feeds (logs) into SIEM/Splunk from on-premises and cloud deployed devices and applications.
• Explore leading cybersecurity products. Work with 3rd party security consultants and service providers to ensure all security aspects are covered. Operate security solutions such as SIEM, PAM, EDR, IDS/IPS and Web Application Firewall while ensuring compliance to regulatory standards and procedures.
• Security Automation: Automating processes using well-known frameworks such as PowerShell, Python, Bash, etc. As well as SOAR build out. (look like using AWS lambda to integration (CloudFront/WAF/ALB) and automating your work.)
• Continuous Monitoring: Management AWS Guard duty and intrusion detection, User Behavior, and other security monitoring.
• Support the SOC Analysts in the use of the toolset and with investigations to establish the facts surrounding potential suspicious activities and to understand the impact and possible risks associated.
• Creation, amendment, tuning and supporting the engineering of advanced or complex protective monitoring use cases.
• Provide security consultancy to other internal teams for matters relating to the SIEM.
• Troubleshooting complex issues that may occur within the SIEM and resolving them with the help of vendor support
• Advise clients of security standards, best practice and solutions relating to SIEM and SOC solutions.

Requirements

• Advanced knowledge and experience of Cyber Security and evidence of working as a SIEM Engineer with previous experience of the software, including architectural design, configuring, operating and problem-solving activities.
• A good understanding of implementing use cases and operational models or specific security solutions to meet the customer’s requirement and understand how SIEM solution
• Hands-on experience in a two or more of the key security domains such as: security operations (SIEM, EDR, vulnerability management), Cloud security, Data security, Identity and access management, and secure software development lifecycle
• Knowledge of networking and AWS/Azure Cloud Security practices and tools.
• SIEM related certifications for Administration, implementation, deployment, architecture.

• Diploma/Degree in Information Technology or equivalent
• Good working experience in the related field - preferably with retail sector.
• Good knowledge of Microsoft windows operating systems
• On-site support and resolution of all software and equipment issues
• Proven analytical and troubleshooting abilities.
• Excellent analytical, troubleshooting and communication skills.
• Microsoft MCSE or Cisco CCNA certified but not compulsory.
• Good understanding of Microsoft SQL server and scripts