Job Title: Security Operations Center (SOC) Engineer III
# Positions: 2
Overview
The CompuCom SOC provides managed security services for Global clients and manages their security operations. The team is responsible for 24X7 telephone and remote support, specialized support for security compliance users, and works with the CompuCom clients on security issues. This role will act as a mentor for the team's junior members and a center of knowledge, leveraging upon the years of experienced gained in this field deploying and supporting Firewalls, IDS/IPS, Content Filters, and SIEM tools.
Responsibilities
- Meet service level agreements (SLA's) regarding response time and customer notifications
- Proficiency in Cisco ASA, FMC/FTD, experience is mandatory including projects implementation, migration on Cisco security suite including AMP, Umbrella, ISE and IronPort.
- CISCO ISE/FTD/FMC Change administration, writing and implementing client sponsored or required changes
- Assist with and define, both team and service key performance indicators (KPI's)
- Work with clients and tools vendors to address all security related issues
- Coordinate security investigations based on internal processes and procedures
- Assist customers or facilitate the implementation of protective and mitigating security controls as required
- Perform manage, add, change, delete operations within the security tools
- Handles the fulfillment of all security requests and calls from the user
- Drives resolution as it relates to customer facing incidents and change management
- Provides central contact point for implementation, architecture and problem management for managed security applications (Firewall, IDS, Encryption, SIEM, EIQ, Web filtering)
- Scan system devices for vulnerabilities according to compliance policies - Nessus
- Initiate security incident response including tracking and recovery actions
- Analyze and validate the network and hosts based on Intrusion Detection System events
- Service and Change management knowledge and understanding a must
- Recommends changes or policies to increase department effectiveness and customer satisfaction
- Monitors SLAs for responsiveness and coverage. Provide regular reports and statistics for service line management
- Participate in an on-call rotation
- Provide oversight and guidance to junior team members as it relates to the Security realm
- Document and create process improvements as needed when gaps are/have been identified
- Participate in an on-call rotation to provide emergency support.
Knowledge And Skill Required
- 8-10 years of experience actively deploying and managing security and networking devices
- Experience in managing Customer Service and client expectations
- Ability to complete swift problem resolution, including troubleshooting
- Analytical approach for solving tasks as well as Ability to repeat procedures
- Familiarity with existing knowledge base to scan for possible solutions to problems
- Ability to multi-task with different types of problems
- Solid written & verbal communication
- Knowledge of security tools like firewalls, IDS's, Web content filtering and content filtering solution. E.g. Cisco, Checkpoint, FortiGate, Snort , EIQ Securevue, ArcSight
- Knowledge of Cloud providers like Azure, AWS and GCP
- Knowledge of compliance standards such as NIST HIPAA, PCI, SOX, Etc
- Knowledge of Microsoft Office Suite products
- Ability to coordinate resources to resolve problems
- Demonstrated high level of Technical Support experience and knowledge required for all services provided by the Security Operations Center
- Strong analytical skills balanced with effective communication and excellent customer service skills
- Excellent and demonstrated knowledge of IT processes and procedures, specifically Incident, Problem, Change and Service Level Management
- At least two (2) industry certification. CCIE Security, CCNP Sec , CCSA, PCNSE, NSE4, Azure Security Associate etc.
- Detailed knowledge and extensive experience working and troubleshooting TCP/IP, MPLS, BGP, OSPF, EIGRP, IS-IS, VXLAN, QoS, AAA, TACACS
