Job description
Manage all aspects of Security Incident Response and Threat Hunting including validation, monitoring, containment, log analysis, system forensic analysis, and reporting.
Work closely with SOC Manager and business stakeholders to meet project deliverables.
Carrying out post-incident reviews, assessing the effectiveness of controls, detection and response capability, and supporting the required improvements with the responsible owners.
Should be expertise in Creation of SOP and Playbook.
Routinely brief and update senior leadership and other stakeholders on the active incidents and manage expectation.
8+ years’ experience of working in IT Security and relevant areas like Security Operations Centre, Incident Response, Threat Intelligence, Digital Forensics, Threat Hunting, Malware Analysis etc.
Should have experience to handle Incident Response for diverse financial organization environment.
Proven experience in handling security events in mission critical environments, hands-on troubleshooting, analysis, and technical expertise to guide team members in resolution of incidents as per agreed SLA.
In depth understanding of incident response frameworks such as NIST and SANS.
Strong knowledge of enterprise detection technologies and processes (Advanced Threat Detection Tools, IDS/IPS, Network Packet Analysis, Endpoint Protection)
Should have hands-on experience with utilizing Cloud based SIEM/EDR/NDR, Elasticsearch etc. and help team in investigating security issues and/or complex operational issues.
Advanced english
remote
Originally posted on Himalayas
Who can apply
Eligible countries: United States. Accepted UTC offsets: UTC-10, UTC-9, UTC-8, UTC-7, UTC-6, UTC-5, UTC+14. Review the full description for employer-specific work authorization, residency and schedule requirements.