Consulting Engineer - Content Development Analyst

Cisco

Krakow, Poland

4 d. temu

Who You’ll Work With

Working as a part of Cisco Professional Services Security team delivering Security Operation Center (SOC) services for one of our strategic customers in Saudi Arabia.

You will collaborate with other the local onsite team and team leads dedicated for the customer (working Sunday to Thursday local time hours 6 AM- 3 PM).

What You’ll Do :

Develop process design and detection workflows for SOC and business tools.

Support governance based on best practices and facilitates proper alignment to projects and major initiatives.

Support analysis of the current environment to detect critical deficiencies and recommends solutions for improvement.

Support analysis of technology industry and market trends to determine their potential impact on security services architecture.

Utilize capability modeling to align systems strategy and planning with business strategy and goals.

Consult with project teams to identify when it is necessary to modify infrastructure and security services to accommodate project needs.

Consult with architecture teams to identify when it is necessary to modify the technical architecture to accommodate infrastructure and security needs.

Participate in the documentation of developed content, architecture and analysis work.

Develop highly-extensible, scalable, and SIEM content services that can be adopted and integrated in a wide range of Cybersecurity use cases.

Who You Are :

Certified Information Systems Security Professional (CISSP)

Experience with architecting, implementing, and operating Splunk or other big data platforms

Experience with IDS, IPS, and SIEM appliance architecture, operations, and management (especially ArcSight and Splunk)

Experience working in a globally distributed enterprise environment

Experience with monitoring use case implementation methodologies

Knowledge of Linux, Unix and Microsoft operating systems

Knowledge of TCP / IP protocols

Experience using regex (regular expressions) with a scripting language (nix shells, python, c++, ruby, etc.)

Excellent communication skills and problem-solving ability

Troubleshooting skills and strong technical learning aptitude

Previous Experience with Demisto (SOAR) is an advantage

Zgłoś tę pracę

Thank you for reporting this job!

Your feedback will help us improve the quality of our services.