WNS Global Services Looking for REF143M-SOC/SIEM (ArcSight/Qradar/Splunk)5-7 Yrs.-Mumbai at Mumbai, Maharashtra Full Time

WNS (Holdings) Limited (NYSE: WNS), is a leading Business Process Management (BPM) company. We combine our deep industry knowledge with technology and analytics expertise to co-create innovative, digital-led transformational solutions with clients across 10 industries. We enable businesses in Travel, Insurance, Banking and Financial Services, Manufacturing, Retail and Consumer Packaged Goods, Shipping and Logistics, Healthcare, and Utilities to re-imagine their digital future and transform their outcomes with operational excellence.We deliver an entire spectrum of BPM services in finance and accounting, procurement, customer interaction services and human resources leveraging collaborative models that are tailored to address the unique business challenges of each client. We co-create and execute the future vision of 400+ clients with the help of our 44,000+ employees. Our global footprint spans 16 countries with 61 delivery centers worldwide including in China, Costa Rica, India, the Philippines, Poland, Romania, South Africa, Spain, Sri Lanka, Turkey, United Kingdom and the United States.

Job Description

Minimum 5 Years of experience in security operations management, implementation and administration on SIEM solutions (Qradar, ArcSight) · Identify security risks, threats, and vulnerabilities of networks, systems, and new technology initiatives. · Sound understanding of · SIEM Solutions (ArcSight, IBM Qradar), Administration skills on SIEM Solutions would be added advantage. · EDR Solutions (McAfee EDR, Crowd strike EDR, McAfee MVISION, Carbon Black). · UEBA Solutions and other threat detection platforms. · DLP Solution (Web/Host/Network) · Intrusion prevention system (IDS/ IPS) · Web Content filtering solutions/ Proxy Solutions · Good Knowledge on Incident management life cycle and contribute to the development and improvement of security detection, Incident response process and solutions are required to support ongoing operations. Ability to create Usecases, Dashboards and Reports based on multiple data sources. · Understanding of TCP/IP stack, OSI model, Network protocols and recent cyber security attacks pattern. · Understanding of operating systems like Windows, CentOS or Ubuntu. · Proactive and quick executor, prioritize tasks and meet project deadlines. · Creation of knowledge base which will be used by SOC analyst for performing their roles and guidance to SOC analysts. · Threat hunting and scripting skills (Shell Scripting, Python or ruby) would be added advantage · Must have flexibility and willingness to work in shifts and provide assistance or on-call support when required · Prepare the SOC Daily, Weekly and Monthly report.

Qualifications

Bachelor’s Degree in Computer Science, Information Systems. · Information Security certifications (ITIL, CEH, CHFI and Comp TIA Security +) · 5-6 years of work experience SOC Operation and Engineering in a Medium/Large Global Organization. · Excellent verbal, written, and analytical skills · Ability to work well in team environment · Ability to adopt new technologies and tools.