Senior IOC Specialist

Overview

Senior IOC Specialist on the IT team providing first escalation support for monitoring, troubleshooting and support of Linux and Windows operating systems, databases, utilities and system tools on cloud or the underlying hardware.

What you'll do

• Respond to monitoring alerts and cases, drive investigations, and provide triage during incidents and outages for services the IOC supports.
• Proactively respond to alerts generated by monitoring systems to maintain environment health and stability.
• Resolve issues by following documented processes and pre-defined standard operating procedures.
• Monitor and analyze logs and alerts across multiple platforms to identify and mitigate security incidents and maintain the integrity of corporate information.
• Leverage network security tools to analyze potential cyber threats, taking appropriate response actions including threat containment and/or escalation.
• Document troubleshooting results and remediation actions, and provide regular status updates to impacted customers.
• Identify and escalate critical impact to on-call teams.
• Create and maintain operational runbooks supporting new and changing infrastructure.
• Perform daily IOC tasks, including managing a case workload, responding to escalated issues and operational checklists.
• Ensure proper transition during shift changes.
• Ensure efficient resolution of incidents through people, process, and technology; manage projects to upgrade and maintain NOC technologies.
• Train team members, project engineers, technical support staff and application development staff to understand and work within the defined architecture and standards.

What you'll need

• 5+ years previous related experience.
• Previous experience with Linux Systems Administration.
• Basic knowledge of Windows and/or Linux server administration concepts such as troubleshooting Windows, IIS, Linux, connectivity, DNS and Active Directory.
• Basic knowledge of networking concepts.
• Basic understanding of IaC concepts.
• Basic level exposure to virtualized/containerized environments.
• Basic knowledge of application support within multi-tier environments (web, application, database).
• Basic knowledge of incident, change, and problem management principles.
• Must have strong organizational and multi-tasking skills to prioritize workload in a fast-paced environment.
• Must work effectively within a team environment.
• Experience with automation tools and procedures.
• Skills: MSSQL database management, DNS CNames, database copy, database alerts management; SSL certificates, F5 load balancing and URL config, IP whitelisting, VPN; Hashicorp Consul; Linux drive expansion, SMTP log understanding, Linux OS management (CDM), server monitoring; containers (Docker, Nomad, Kubernetes); secret management (Vault); Windows Server file archive management, active-active server, DFS replication, disk management, user access procedures, server alerts management; AWS and Azure compute, DNS, database, networking and security.
• Fluent written and oral communication in English.

Nice to have

• Experience with PagerDuty, LogicMonitor, Splunk, Grafana and Salesforce.

Details

• Location: Bangalore, India.
• Hybrid work opportunities.
• Flexible to work in a 24x7 environment.