Siem Architect

Location:Mumbai Type:Contractual Crowdstrike SIEM Architect Security architects support the stakeholder security requirements by providing structure and guidance related to the security protections of the organizations mission and business processes. Working with the Enterprise architecture and Engagement Managers, the Security architect includes reference models, segment and solution architectures, and the resulting systems supporting the security aspects of the mission and business processes. Help Clients clearly define the security problems, assess and perform gap-analysis, or help optimize costs and maximize security control utilization with mapping exercises and roadmap development.Support the streamlining of multiple IT, security, and development groups to develop requirements and the associated architectures for multiple integrated security systems.Develop guidelines, frameworks and security architecture patterns to provide structure and guidance to security projects while integrating with the Enterprise Architecture artifacts and Engagement Management requirements.Work with solution engineers to ensure detailed designs and integration plans follow the high-level architecture and established business requirements.Develop security architecture blueprints, design artifacts, roadmaps, and solution alternatives to drive budgets and management decisions. Security architects are required to: Understand a companys technology and information systemsPlan, research and design security architecturesUnderstand the results of vulnerability testing and security assessmentsResearch security systems and authentication protocolsDevelop requirements for local, wide, and virtual private networksDevelop requirements for routers, firewalls, and related network devicesUnderstand public key infrastructuresIdentify integration issuesProvide technical supervision to a security teamReview and provide input on security policies, process or procedures with templates or patterns for standardsOversee security awareness programsOversee the response to security-related incidentsProvide review and input on After Action Reports and Root Cause Analysis Have a thorough understanding of the following security solutions Threat and Vulnerability ManagementCrowdstrike Security Information Event Management (SIEM)Endpoint Detection and Response (AV, HIPS, HIDS)Web Application FirewallsURL Content FilteringDMARC, DKIM, and SPFIdentity and Access ManagementPrivileged Account ManagementThreat Hunting & Penetration TestingPKI - Public Key InfrastructureWeb Application FirewallsE-Discovery & Legal HoldData Loss PreventionBCDRSAST, DAST, And SDLCRegulatory FrameworksFirewall solutionsPhishing Tactics, Techniques, and ProcessesNetwork Access Controls (NAC)" .