Senior Cyber Engineer - GCDC (AGENCY)

Job Description

Maersk is going through a time of unprecedented change, transforming our business to becoming the global integrator of container logistics. We are transforming into a product and platform led organisation and undertaking an agile transformation across our enterprise.Show More We offerMaersk is going through a time of unprecedented change, transforming our business to becoming the global integrator of container logistics. We are transforming into a product and platform led organisation and undertaking an agile transformation across our enterprise.Show More Key responsibilitiesAct as a Cyber Defence Operations Engineer in a SIEM/ Log onboarding team collaborating with the Cyber Operations, Cyber Operations Governance teams and global business unit stakeholders on the design, deployment and management of core security tooling focusing on risk reduction Develop and execute delivery plans in collaboration with wider Cyber Security and Enterprise Architecture teams to implement security tools and capabilities Establish clear understanding and documentation of processes related to cyber security tooling together with providing business analysis with each source and owner to evaluate the risk appetite and requirements Review data of current log sources onboarded and build rules/ use cases to enhance visibility of the Maersk estate against MITRE ATT&CK vectors Leverage security automation tooling and develop playbooks and workflows based on operational use cases Stay close to the integration and implementation of security controls for global Information Technology platforms, capabilities and applications to ensure adherence to critical business objectives, regulatory requirements and cyber security policies Ensure the deployment of security tools is achieved with the minimum of impact to business Maintain detailed knowledge of emerging threats, risks, technical innovations and security capabilities Support the continuous improvement of Maersk s capability to detect and respond to incidents by collaborating with other teams across Cyber Operations Assist in the Development and improvement of the security incident response framework, including related standards and processes, and ensure effective implementation Provide the rules for the effective management of Cyber controls in the Run/Incident Response organization Assisting in building out of integrations of tool sets to our XSOAR tool to allow for automationShow More We are looking forAct as a Cyber Defence Operations Engineer in a SIEM/ Log onboarding team collaborating with the Cyber Operations, Cyber Operations Governance teams and global business unit stakeholders on the design, deployment and management of core security tooling focusing on risk reduction Develop and execute delivery plans in collaboration with wider Cyber Security and Enterprise Architecture teams to implement security tools and capabilities Establish clear understanding and documentation of processes related to cyber security tooling together with providing business analysis with each source and owner to evaluate the risk appetite and requirements Review data of current log sources onboarded and build rules/ use cases to enhance visibility of the Maersk estate against MITRE ATT&CK vectors Leverage security automation tooling and develop playbooks and workflows based on operational use cases Stay close to the integration and implementation of security controls for global Information Technology platforms, capabilities and applications to ensure adherence to critical business objectives, regulatory requirements and cyber security policies Ensure the deployment of security tools is achieved with the minimum of impact to business Maintain detailed knowledge of emerging threats, risks, technical innovations and security capabilities Support the continuous improvement of Maersk s capability to detect and respond to incidents by collaborating with other teams across Cyber Operations Assist in the Development and improvement of the security incident response framework, including related standards and processes, and ensure effective implementation Provide the rules for the effective management of Cyber controls in the Run/Incident Response organization Assisting in building out of integrations of tool sets to our XSOAR tool to allow for automationShow More, Maersk is going through a time of unprecedented change, transforming our business to becoming the global integrator of container logistics. We are transforming into a product and platform led organisation and undertaking an agile transformation across our enterprise.Show More We offerMaersk is going through a time of unprecedented change, transforming our business to becoming the global integrator of container logistics. We are transforming into a product and platform led organisation and undertaking an agile transformation across our enterprise.Show More Key responsibilitiesAct as a Cyber Defence Operations Engineer in a SIEM/ Log onboarding team collaborating with the Cyber Operations, Cyber Operations Governance teams and global business unit stakeholders on the design, deployment and management of core security tooling focusing on risk reduction Develop and execute delivery plans in collaboration with wider Cyber Security and Enterprise Architecture teams to implement security tools and capabilities Establish clear understanding and documentation of processes related to cyber security tooling together with providing business analysis with each source and owner to evaluate the risk appetite and requirements Review data of current log sources onboarded and build rules/ use cases to enhance visibility of the Maersk estate against MITRE ATT&CK vectors Leverage security automation tooling and develop playbooks and workflows based on operational use cases Stay close to the integration and implementation of security controls for global Information Technology platforms, capabilities and applications to ensure adherence to critical business objectives, regulatory requirements and cyber security policies Ensure the deployment of security tools is achieved with the minimum of impact to business Maintain detailed knowledge of emerging threats, risks, technical innovations and security capabilities Support the continuous improvement of Maersk s capability to detect and respond to incidents by collaborating with other teams across Cyber Operations Assist in the Development and improvement of the security incident response framework, including related standards and processes, and ensure effective implementation Provide the rules for the effective management of Cyber controls in the Run/Incident Response organization Assisting in building out of integrations of tool sets to our XSOAR tool to allow for automationShow More We are looking forAct as a Cyber Defence Operations Engineer in a SIEM/ Log onboarding team collaborating with the Cyber Operations, Cyber Operations Governance teams and global business unit stakeholders on the design, deployment and management of core security tooling focusing on risk reduction Develop and execute delivery plans in collaboration with wider Cyber Security and Enterprise Architecture teams to implement security tools and capabilities Establish clear understanding and documentation of processes related to cyber security tooling together with providing business analysis with each source and owner to evaluate the risk appetite and requirements Review data of current log sources onboarded and build rules/ use cases to enhance visibility of the Maersk estate against MITRE ATT&CK vectors Leverage security automation tooling and develop playbooks and workflows based on operational use cases Stay close to the integration and implementation of security controls for global Information Technology platforms, capabilities and applications to ensure adherence to critical business objectives, regulatory requirements and cyber security policies Ensure the deployment of security tools is achieved with the minimum of impact to business Maintain detailed knowledge of emerging threats, risks, technical innovations and security capabilities Support the continuous improvement of Maersk s capability to detect and respond to incidents by collaborating with other teams across Cyber Operations Assist in the Development and improvement of the security incident response framework, including related standards and processes, and ensure effective implementation Provide the rules for the effective management of Cyber controls in the Run/Incident Response organization Assisting in building out of integrations of tool sets to our XSOAR tool to allow for automationShow More,

Keyskills :
security incident responseuse casescyber securitysecurity toolscyber operationsbusiness analysissecurity controlssecurity automationtechnology platformsinformation technology