Responsibilities
You will be responsible for triaging, conducting incident investigations, and threat hunting. Contribute to improving threat detection capabilities across a complex organization. Your other responsibilities are as follow:
- Conduct triage, incident investigations, and threat hunting within the Keppel environment.
- Review, update, and develop threat detection rules using SIEM or EDR tools.
- Create, review, and update security playbooks.
- Review and update the incident response plan.
- Automate processes using tools like SOAR or through scripting.
- Provide timely and relevant updates to key stakeholders.
- Stay informed on the evolving threat landscape, TTPs, and adhere to industry best practices.
- This will be an individual contributor role and doesn't need to lead a team.
Requirements
You will need a degree in Computer Science, Information Security, Information Technology, or a related discipline.
- Solid foundation in cybersecurity principles.
- Strong analytical skills, with the ability to synthesize information from various sources to support investigations.
- Proficiency in Python scripting is required.
- Experience in DFIR is required.
R1332781