Job description

Security Analyst - CERT Team

KEY EXPECTED ACHIEVEMENTS

1. Security Incident Handling:

Analyze and confirm the severity of security incidents based on available data.
Follow documented incident response procedures to resolve threats efficiently.
Collaborate with technical experts to develop and implement remediation plans.
Track and monitor corrective actions, ensuring stakeholders are informed and engaged.
Write detailed incident reports, including hot and cold feedback, for major incidents.
Participate in crisis management, including artifact collection, risk analysis, and first-level threat assessments.

2. Projects, Continuous Improvement, and Expertise Sharing:

Stay updated on the latest incident response techniques through training and daily monitoring.
Provide technical expertise for projects, including tool evaluations, risk analysis assistance, and technical audits.
Propose and develop new detection scenarios, automation tools, or enhancements to improve productivity.
Conduct team knowledge-sharing sessions by presenting in-depth technical topics.
Contribute to the broader expertise missions within the team based on skillsets.

Experience Requirements:

10-12 years of relevant experience in cyber security, with a focus on security incident handling, detection, and analysis.

Qualifications and Skills:

Technical Skills:

Data Analysis & SIEM Tools:
Proficient in SPL (Search Processing Language) for data analysis, threat hunting, and creating dashboards.
Strong experience with SIEM tools like Splunk (Preferred), Q Radar or Sentinel.
Endpoint Protection (EPP) & Endpoint Detection and Response (EDR):
Hands-on experience with tools such as:
Trend Micro Deep Security
Microsoft Defender
Palo Alto Cortex
Tehtris eGambit
Network Security & Firewalls:
Knowledge of firewalls, IDS/IPS, VPNs, and network devices such as:
Cisco
Palo Alto Global Protect
Proficiency in analyzing firewall logs and interpreting PCAPs using tools like Wireshark.
Operating Systems & Scripting:
In-depth understanding of Windows and Linux log analysis.
Knowledge of PowerShell scripting and other system scripting languages.
Investigative Skills:
Ability to autonomously investigate alerts from detection to resolution.

Behavioral Competencies: