SOAR Admin

Saint-Gobain group through its group company Grindwell Norton Limited has established INDEC - an International Delivery Center in Mumbai to provide IT solutions and services to the groups’ businesses Globally.

INDEC is currently organized into INDEC Application Development, INDEC Infrastructure Management and Cyber Security Management. While INDEC Apps specializes in Software application development and maintenance services (ADM), INDEC Infra specializes in monitoring and managing the key IT infrastructure assets of the group deployed globally across 70 countries worldwide. INDEC provides IT Services and Solutions to the Saint-Gobain group through its state-of-the-art delivery centers based at Andheri – East in Mumbai. There are approximately 1200+ associates working in INDEC currently. INDEC Apps provides software application development and maintenance services across a wide spectrum covering SAP, Java, PHP, .Net, CRM, Mobility, Digital, Artificial Intelligence (AI), and Robotic Automation. INDEC Infra on the other hand operates the following service lines: Network Coordination Center (NCC/NOC), Data Center Infrastructure Support, IT Standards, Tools Engineering and Reporting Automation. INDEC Cybersecurity provides 24/7 Security monitoring to detect & react on any suspicious activity in Saint- Gobain. It provides services on vulnerability scanning, web application firewall, endpoint protection, strong authentication, digital certificate, Win 10 MBAM and SFTS support.

Key Responsibiities:
• Evaluate and enhance the performance of SIEM/SOAR systems to ensure optimal threat detection and incident response.
• Develop and maintain automation scripts and playbooks to streamline incident detection, analysis, and response processes. Leverage SOAR capabilities to reduce manual intervention and improve response times.
• Oversee the day-to-day administration of SIEM/SOAR platforms, ensuring their availability, reliability, and security. Perform regular updates, patches, and configuration changes.
• Collaborate with the Incident Response team to ensure seamless integration of detection and response functions. Provide support during security incidents to ensure timely and effective remediation.
• Work closely with other IT and security teams to develop specific use cases and to enhance the overall security posture of the organization. Share insights and recommendations to improve overall cybersecurity posture.
• Maintain detailed documentation of automation, scripts, and improvement.
• Manage execution of standard procedures for the administration, content management, change management, version/patch management, and lifecycle management of the SIEM/SOAR platforms.
• Manage technical documentation around the content deployed to the SIEM/SOAR.
• Manage reports, dashboards, metrics for CyberSOC KPIs and presentation to senior management & other stakeholders

Qualificaton:
• Bachelor's degree in Computer Science, Information Security, EXTC or related field.
• Relevant certifications (e.g., CISSP, CCSP, CompTIA Security+) are highly desirable.
• Proven experience (3+ years) working within the Cybersecurity field, with a focus on security platform implementation & administration.
• Experience with deploying and managing a large SIEM/SOAR environment.
• Experience with Palo Alto XDR and/or other SIEM platforms like Sentinel, Qradar, Splunk, ArcSight, etc.
• Experience with Palo Alto XSOAR and/or equivalent SOAR Platforms like Resilient, Phantom, etc.
• Proficiency in scripting languages (e.g., Python, Bash) for automation and customization of security processes is highly desirable.

Functional Skills/Competencies:
• Has a systematic, disciplined, and analytical approach to problem solving.
• Excellent ability to think critically under pressure.
• Strong communication skills to convey technical concepts clearly to both technical and non- technical stakeholders.
• Willingness to stay updated with evolving cyber threats, technologies, and industry trends.
• Capacity to work collaboratively with cross-functional teams, developers, and management to implement robust security measures.

SELECTION PROCESS:

1. Interested Candidates are mandatorily required to apply through this listing on Jigya. Only applications received through Jigya will be evaluated further.
2. Shortlisted candidates may be required to appear in an Online Assessment administered by Jigya on behalf of Saint-Gobain INDEC
3. Candidates selected after the screening test will be interviewed by Saint-Gobain INDEC