Security Analyst CERT Team
KEY EXPECTED ACHIEVEMENTS
1. Security Incident Handling:
- Analyze and confirm the severity of security incidents based on available data.
- Follow documented incident response procedures to resolve threats efficiently.
- Collaborate with technical experts to develop and implement remediation plans.
- Track and monitor corrective actions ensuring stakeholders are informed and engaged.
- Write detailed incident reports including hot and cold feedback for major incidents.
- Participate in crisis management including artifact collection risk analysis and firstlevel threat assessments.
2. Projects Continuous Improvement and Expertise Sharing:
- Stay updated on the latest incident response techniques through training and daily monitoring.
- Provide technical expertise for projects including tool evaluations risk analysis assistance and technical audits.
- Propose and develop new detection scenarios automation tools or enhancements to improve productivity.
- Conduct team knowledgesharing sessions by presenting indepth technical topics.
- Contribute to the broader expertise missions within the team based on skillsets.
Experience Requirements:
- 1012 years of relevant experience in cyber security with a focus on security incident handling detection and analysis.
Qualifications and Skills:
Technical Skills:
- Data Analysis & SIEM Tools:
- Proficient in SPL (Search Processing Language) for data analysis threat hunting and creating dashboards.
- Strong experience with SIEM tools like Splunk (Preferred) Q Radar or Sentinel.
- Endpoint Protection (EPP) & Endpoint Detection and Response (EDR):
- Handson experience with tools such as:
- Trend Micro Deep Security
- Microsoft Defender
- Palo Alto Cortex
- Tehtris eGambit
- Network Security & Firewalls:
- Knowledge of firewalls IDS/IPS VPNs and network devices such as:
- Cisco
- Palo Alto Global Protect
- Proficiency in analyzing firewall logs and interpreting PCAPs using tools like Wireshark.
- Operating Systems & Scripting:
- Indepth understanding of Windows and Linux log analysis.
- Knowledge of PowerShell scripting and other system scripting languages.
- Investigative Skills:
- Ability to autonomously investigate alerts from detection to resolution.
Behavioral Competencies:
- Strong analytical and problemsolving skills.
- Ability to work independently while collaborating with a global team.
- Excellent communication and reportwriting skills.
- Passion for continuous learning and knowledge sharing.
- Flexibility to work in a fastpaced environment and support oncall rotations.
Availability
The role operates on a followthesun model requiring collaboration with the global Group CERT team. Analysts must operate 34 days from the office and be available on a rotation basis for Weekend on call support.
Required Experience:
IC