Senior Cybersecurity Incident Response Specialist
Job Summary
We are seeking a highly skilled and experienced Cybersecurity Incident Detection & Response Specialist to join our Group IT Cybersecurity Incident Detection & Response team. The ideal candidate should possess extensive experience in cybersecurity monitoring, incident response, and system engineering
Job Description
- Security Monitoring: Ensure continuous security monitoring to detect and respond to threats in real-time.
- Server & Endpoint Detection & Response: Deploy and manage detection and response solutions for servers (Windows, Linux) and endpoints (Windows, Mac, Linux).
- Cyber Threat Intelligence: Gather and analyze data from various sources to identify emerging threats and vulnerabilities.
- Cybersecurity Response & Management: Handle cybersecurity incidents, ensuring timely and effective resolution.
- Cybersecurity Crisis Management: Develop and implement crisis management protocols to address severe cybersecurity incidents on a global scale.
- Security Use Case Development: Design and develop security use cases to enhance detection and response capabilities.
- Cybersecurity System Engineering: Assist in the engineering and integration of cybersecurity systems and platforms.
- Security Orchestration Automation & Response (SOAR): Implement and manage SOAR platforms to automate and streamline incident response processes.
- Brand Protection Service: Oversee 24x7 brand protection services to safeguard the organization’s reputation and digital assets.
- Digital Forensics: Assist in digital forensic investigations for servers, endpoints, and mobile devices (Android, Apple), including forensic data analysis.
- Stakeholders Engagement: Collaborate with various departments (e.g., PR, HR, Legal) to ensure a coordinated response to incidents.
Key Qualification
- Diploma or Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or a related field.
- Minimum of 6 years of experience in cybersecurity, with a focus on incident detection and response and system engineering.
- Proficiency in cybersecurity tools and platforms, including SIEM, EDR, SOAR, and threat intelligence solutions. Experience with Windows, Linux, Mac, Android, and Apple devices.
- Excellent verbal and written communication skills, with the ability to effectively engage with stakeholders at all levels.
- Strong analytical and problem-solving skills, with a proactive approach to identifying and addressing challenges.
- Relevant cybersecurity certifications (e.g., CISSP, CISM, CEH, GIAC) are highly desirable.