Job Details
Experience Needed:
Career Level:
Education Level:
Salary:
Job Categories:
Skills And Tools:
Job Description
- Maintain a direct working relationship with the SOC.
- Ability to coordinate multiple incidents and lead service delivery milestones
- Provide single source of contact with customer expectations and deliverables
- Coordinate the use of process and procedures in incident investigations
- Build incident project plans for events and provide responses
- Develop relationships and provide essential reporting to key stakeholders
- Assist Creation of reports and daily activities for engagements and incidents work actions with internal operation teams (System, Network, InfoSec,…), and evidence collection.
- Responsible for ensuring that incident response and protective security frameworks align with business requirements and are always being improved.
- Providing updates to internal and external stakeholders, following an established governance program.
- Track the progress of the IR process during the security incident.
- Coordinate the actions of other IR team members, disseminating information as
- Provide expertise where necessary by either offering guidance from personal knowledge and experience or by channeling such information from the subject matter
- Assist in Information Security business as usual tasks.
Job Requirements
- Bachelor’s degree from Computer Science / Engineering
- Strong understanding of basic computer science: Algorithms, data structures, databases, operating systems, networks, and tool development (not production quality software, but tools that can help you do stuff).
- Strong understanding of IT operations: Help desk, Network Technologies (Firewall, IPS, WAF, etc.), endpoint management and server management.
- Strong ability to communicate: write clearly and speak authoritatively to different kinds of audiences (business leaders and techies).
- Strong understanding of adversary Motivations: cybercrime, cyber hacktivism, cyberwar, cyber espionage and the difference between cyber propaganda and cyber terrorism.
- Strong understanding of security operations concepts: Perimeter defense, data loss protection, insider threat, kill chain analysis, risk assessment, and security metrics.
- Knowledge about SIEM and DLP solutions.
- Handling On-Call Support for Security incidents received from SOC Team
