Manager, Threat Hunting & Response

We are seeking an experienced and highly skilled Incident Response Consultant/Manager to join our team. The successful candidate will be responsible for providing incident response services to our clients, developing incident response plans, and managing the incident response program.

Key Responsibilities:

• Provide incident response services to clients, both local and overseas, including incident handling, investigation, containment, and recovery.
• Develop incident response plans for clients, including policies, procedures, and playbooks, tailored to their specific needs and risk profile.
• Work closely with clients to understand their business and technical environment and provide tailored incident response services and recommendations.
• Manage the incident response program, including leading incident response engagements, mentoring the incident response team, and providing guidance to clients on incident response best practices.
• Keep up-to-date with the latest threat intelligence and trends and incorporate this information into the incident response program.
• Conduct incident response tabletop exercises and post-incident reviews to continually improve the incident response program.
• Assist in developing proposals, statements of work, and other deliverables as part of the sales process.

Qualifications:

• Bachelor's degree in computer science, information security, or a related field.
• At least 5 years of experience in incident response management and cross-country IR experience.
• Knowledge of incident response frameworks such as NIST, SANS, or ISO.
• Understanding of the latest threats and trends in information security.
• Experience in leading and mentoring incident response teams.
• Excellent communication and interpersonal skills, with the ability to communicate technical information to both technical and non-technical stakeholders.
• Relevant certifications such as CISSP, CISM, GCFE or GCFA are preferred.

Candidates possessing the following abilities/skills will be considered favourably:

• Strong technical understanding of information security concepts and technologies, including network security, endpoint security, cloud security, and threat intelligence.
• Experience with incident response tools and technologies, such as SIEM, EDR, forensic tools, and threat hunting platforms.
• Knowledge of scripting languages such as Python or PowerShell for automating incident response processes.
• Familiarity with operating systems such as Windows, Linux, and macOS, and the ability to analyse system logs and network traffic.
• Experience with incident response in cloud environments, including AWS, Azure, or Google Cloud Platform.
• Familiarity with regulatory frameworks such as PDPA, GDPR, HIPAA, or PCI DSS, and their implications for incident response.
• Experience with incident response in a variety of industries, including finance, healthcare, government, or technology.

This is an exciting opportunity for an experienced Incident Response Manager with cross-country incident response experience to join a dynamic and growing organisation. The successful candidate will be part of a talented team and will have the opportunity to make a significant impact on the organisation's security posture. If you meet the qualifications and are interested in this opportunity, please submit your application today.