Responsibilities:
- Combining information for group security, IT and business strategy to develop security strategy and planning.
- Detect and investigate security incidents, anomalies, and potential threats to networks, applications, and data. Collaborating with Global SOC team to analyze security breaches, new security vulnerabilities, threats to determine root causes and recommend appropriate remediation actions.
- Develop and execute incident response plans, procedures, and playbooks to facilitate timely and effective response to security incidents. Coordinate with internal teams and external stakeholders to contain, eradicate, and recover from security breaches.
- Maintain accurate records of security incidents, investigations, and remediation activities. Prepare and present reports, metrics, and dashboards to management and stakeholders to communicate security posture and performance. Document procedures and process as necessary.
- Monitor security alerts, logs, and event data from various sources, including EPP, EDR, IPS/IDS, SOC etc.
- Stay updated on the latest cybersecurity threats, trends, and attack techniques by analyzing threat intelligence feeds, security advisories, and industry reports. Use this information to enhance threat detection and response capabilities.
- Support region-wide activities. Plan and execute security self-assessments, vendor security assessments and annual remediation activities.
Requirements:
- 3 years’ experience in Information Technology and at least 2 years in Security
- Ability to communicate technical topics to diverse audiences including technology teams, leaders and business users without a technical background.
- Ability to work closely with a wide variety of teams from diverse cultural backgrounds.
- Degree in Information Technology, or relevant fields
- Hands on experience in security operations & solutions
- Maintain up-to-date security knowledge on trends in the industry. Be able to identify and communicate current and emerging security threats across security domains.
- Security focused industry certification, e.g.: Microsoft Security, GSEC, CEH, etc.
- Security technology: MS security (Azure, O365, ect), Qualys, Tanium, TrendMicro, IAM, AWS, etc.
