Level 3 Security Incident Response Senior Specialist

Job Description

As a Security Incident Responder, you will be primarily accountable for the following key responsibilities:- Handling Security Incidents assigned by the Security Incident Service Manager.- Ensuring that incidents are handled according to agreed procedures. Investigates escalated incidents and seeks resolution. Facilitates recovery, following resolution of incidents.- Ensuring that resolved incidents are properly documented and closed.- Analyzing causes of incidents, and informing service owners to minimize the probability of recurrence and contribute to service improvement.- Analyzing metrics and reporting on the performance of the incident management process.- Working with service providers to ensure the proper implementation of the Security Incident Process and Policies.- Collaborating closely with the Security Incident Service Manager to identify areas of improvement for the Security Incident Process and Policies.- Collaborating with countries, businesses, and regions to identify key resources that can assist in the Security Incident process and incident handling.- Defining standard methods and processes for incident resolution, delegating them to the back-office, and overseeing the work of the back-office.- Being involved in the installation, management, maintenance, and optimization of IS security solutions/services.Qualifications for the role include:- 10 years in IT, with at least 5 years in Security incident response.- Graduate level with an IT focus or equivalent practical experience.- Security Certification (CISSP, CISM, GSEC, or others).- Experience in AntiVirus Technology and AV Tools.- Experience in EDR Technology and EDR Tools.- Experience in log analysis of Firewalls, Proxy servers, Operation Systems, Databases, preferably via SIEM Servers/clients, mobile devices, appliances, OSs, common applications, and databases with in-depth knowledge. As a Security Incident Responder, you will be primarily accountable for the following key responsibilities:- Handling Security Incidents assigned by the Security Incident Service Manager.- Ensuring that incidents are handled according to agreed procedures. Investigates escalated incidents and seeks resolution. Facilitates recovery, following resolution of incidents.- Ensuring that resolved incidents are properly documented and closed.- Analyzing causes of incidents, and informing service owners to minimize the probability of recurrence and contribute to service improvement.- Analyzing metrics and reporting on the performance of the incident management process.- Working with service providers to ensure the proper implementation of the Security Incident Process and Policies.- Collaborating closely with the Security Incident Service Manager to identify areas of improvement for the Security Incident Process and Policies.- Collaborating with countries, businesses, and regions to identify key resources that can assist in the Security Incident process and incident handling.- Defining standard methods and processes for incident resolution, delegating them to the back-office, and overseeing the work of the back-office.- Being involved in the installation, management, maintenance, and optimization of IS security solutions/services.Qualifications for the role include:- 10 years in IT, with at least 5 years in Security incident response.- Graduate level with an IT focus or equivalent practical experience.- Security Certification (CISSP, CISM, GSEC, or others).- Experience in AntiVirus Technology and AV Tools.- Experience in EDR Technology and EDR Tools.- Experience in log analysis of Firewalls, Proxy servers, Operation Systems, Databases, preferably via SIEM Servers/clients, mobile devices, appliances, OSs, common applications, and databases with in-depth knowledge.

Keyskills :
Security Incident ResponseIncident ManagementService ImprovementPoliciesLog AnalysisFirewallsDatabasesMobile devicesAppliancesMiddlewareSecurity Incident ProcessIT Security SolutionsAntiVirus TechnologyAV ToolsEDR TechnologyEDR ToolsProxy