Cyber Security Analyst

• Driving and coordinating independently all CyberSecurity incident response, and keeps the team focused on minimizing damage, and recovering quickly, act on lessons learnt.

• Document all incident activities, especially investigation, discovery, and recovery tasks, and develops reliable timeline for each stage of the incident.

• Developing and implementing dynamic remediation plans for customers in conjunction with incident response engagements

• Investigating and eradicating attackers, improve monitoring and protection capabilities.

• Experience of Threat Hunting, on both endpoint and twork. Leveraging cyber threat intelligence indicators provided by the TI team to help enrich detection and response

• Assisting in the development of new use-cases in the SIEM alongside the Threat Detection Operations and Security Engineering teams .

• Mentor to SOC analysts to help them build stronger skills. Serving as an escalation point from junior analysts to provide triage and response guidance

• Should have excellent communication and reporting skills to represent security incident to top management.

• Flexibility agility to support a 24-hour a day/365 days/year operation

• Capable of meeting and exceeding Service Level Agreements (SLAs) as required per customer requirements

• This position will float to cover various work schedules and perform monitoring duties when there are shift staffing shortages

7+years of experience in handling incident response and handling attacks like: ransomware outbreak, DDoS attack, Data Breach