Acts as Incident Commander for high-impact cyber breaches and advanced attack methods, using the Cyber Kill Chain methodology.
Provide project support-related tasks to integrate the security platform's ongoing tuning support for existing technology.
Apply technical acumen and analytical capabilities to improve the efficiency and effectiveness of the response.
Develop and enhance capabilities of digital and computer forensics
Knowledge sharing of threat intelligence/ management during weekly meetings
Conduct security event analysis and validation, triage validated incidents, perform initial containment where feasible, research incidents and enrich incident case documentation, and escalate incidents for further analysis, containment, and eradication.
Review and analyze threat intelligence information and proactively search applications, systems, and network logs to hunt for and thwart relevant threats identified threats.
Contribute to the development and maintenance of playbooks to establish and continuously improve the team's operating knowledge base.
Participate in post-incident activities and contribute to lessons learned to improve security operations.
Provide sound technical recommendations that enable remediation of security issues.
Utilize advanced threat models, SIEM use cases, and incident response playbooks.
Provide guidance and mentorship to improve analyst skill sets guiding threat management and modeling, identify threat vectors, and develop use cases for security monitoring.
Disclaimer: Drjobpro.com is only a platform that connects job seekers and employers. Applicants are advised to conduct their own independent research into the credentials of the prospective employer.We always make certain that our clients do not endorse any request for money payments, thus we advise against sharing any personal or bank-related information with any third party. If you suspect fraud or malpractice, please contact us via contact us page.