What’s The Role?

Responsible for leading and coordinating the response to cybersecurity incidents within our organization. You will play a crucial role in monitoring, identifying, analyzing, and mitigating cyber threats to ensure the security and integrity of our systems and data. This position requires strong technical expertise, leadership skills, and the ability to work effectively under pressure.

How Will You Add Value?

Manage a team responsible for investigating and responding to cyber incidents. This involves assessing the incident’s nature and determining necessary resources for resolution.

• Incident Detection and Analysis :
• Utilize various monitoring tools and techniques to detect and analyze cybersecurity incidents.
• Investigate alerts, anomalies, and suspicious activities to determine the root cause and severity of incidents.
• Ensure that alerts generated by monitoring tools are accurate and relevant. False positives can lead to unnecessary investigations and resource wastage.
• Response Coordination :
• Lead and coordinate the incident response process, including mobilizing the response team and allocating resources effectively.
• Develop and maintain incident response plans, procedures, and playbooks to ensure an organized and efficient response to incidents.
• Containment and Mitigation :
• Take immediate action to contain and mitigate the impact of cybersecurity incidents.
• Implement temporary and permanent solutions to prevent further exploitation and damage.
• Forensic Analysis :
• Conduct forensic analysis of compromised systems and networks to gather evidence and identify the extent of the breach.
• Document findings and maintain chain of custody for evidentiary purposes.
• Communication and Reporting :
• Serve as the primary point of contact for communication with stakeholders, including management, IT teams, legal, and law enforcement agencies.
• Provide timely and accurate updates on incident status, findings, and remediation efforts.
• Prepare incident reports and post-incident reviews for management and regulatory purposes.
• Continuous Improvement :
• Stay updated on the latest cybersecurity threats, vulnerabilities, and best practices.
• Conduct lessons learned sessions and contribute to the improvement of incident response processes and procedures.
• Continuously train the monitoring team on new threats, tools, and techniques. Foster a culture of security awareness.
• Conduct post-incident reviews to assess the effectiveness of the response process. Identify areas for improvement and adjust monitoring accordingly.

What Do You Need?