Ciscofirepower-ids/ips-sunitha - Hyderabad @ Orcapod

Description:

Cisco firepower IPS (Priority)

Platform/Solution Administration:
i. Perform periodic health monitoring and maintenance of the infrastructure security tool, specifically, monitor logs for platform health monitoring issues and availability
ii. Monitor license expiry for the instances of the in-scope tools
iii. Monitor and renew certificates for the in-scope tools as required
iv. Coordinate with solution vendor for upgrades / security patches, maintenance and troubleshooting product-related defects and issues
v. Perform upgrades and deploy patches post impact analysis in non-production and production environment in accordance with Marriotts change management protocol
vi. Coordinate with the infrastructure team for any hardware and/or OS related upgrades and issues impacting the in-scope tools
vii. Resolve operational IT incident tickets (P1/P2/P3) (as per agreed upon Service Level Objectives (SLOs)) and service requests as per the steps outlined in the Operational IT Incident/Service Request Management section within the original Statement of Work

Network Intrusion Detection and Prevention Solution Operations:

i. Review and update the intrusion prevention system (IPS)/intrusion detection system (IDS) signatures as needed
ii. Develop and tune rulesets based on service requests from the Marriotts Security Operations Center (SOC) team as needed
iii. Perform review and tuning of existing rulesets to reduce false positives, if any
iv. Perform periodic review of IDS/IPS configurations and rulesets as needed
v. Work with Security Cyber Incident Response Team (CIRT) for additional reporting
vi. Confirm logs are forwarded to Splunk for the in-scope tools.


This is a 24x7 rotational shift role with Cisco firepower as primary skill

Location:Hyderabad