seeking a CSIRT Analyst Shift Lead for a 24/7/365 Security Operations Center.
Working within Computer Security Incident Response Team (CSIRT) you will have the opportunity to build innovative solutions to identify and mitigate information-security threats. You will work collaboratively to creatively solve complex security problems in a heterogeneous environment.
With your leadership, were building the best security incident response team in the industry. Your skills, vision, tenacity, and passion will help us defend and respond daily to keep critical information assets away from threats and hackers.
Candidates must have extensive experience working with various security methodologies and processes, advanced knowledge of TCP/IP protocols, extensive experience providing analysis and trending of security log data from a large number of heterogeneous security devices.
Must demonstrate expert knowledge in two (2) or more of the following areas:
Vulnerability Assessment and Pen Testing, Intrusion Prevention and Detection, Access Control and Authorization, Policy Enforcement, Application Security, Protocol Analysis, Firewall Management, Incident Response, Encryption, Web-filtering, Advanced Treat Protection, Email Security, Digital Forensics, Monitoring and Detection, Cyber Intelligence Analysis.
Core Job Functions Include:
Leadership Guides the CSIRT team in its day-to-day operations, covers during on-call rotations with shift leads, and manages ticket queue/workload.
Escalations Responding to escalated events from security analysts to develop/execute security controls, Defense/countermeasures to prevent internal or external attacks or attempts to infiltrate company email, data, e-commerce and web-based systems.
Research Researching attempted or successful efforts to compromise systems security and designs countermeasures.
Communications Provides information to management regarding the negative impact on the business caused by theft, destruction, alteration or denial of access to information and systems.
Digital Forensics As it relates to information systems, performs HR investigations and legal holds in a forensically sound manner. Consults with HR and legal subject matter experts to adhere to local country law
דרישות:
To be successful in this position, you should be proficient with:
Incident Response Getting people to do the right thing in the middle of an investigation.
Offensive Techniques Penetration testing, IOCs, and exploits at all layers of the stack.
Logs - you should be comfortable with a SEIM to be able to gather and analyze logs to recreate incidents and hunt for threats.
System Forensics Basic understanding of image acquisition techniques, memory forensics, and the like.
Networking Fundamentals - TCP/IP Protocols (HTTP, DNS, FTP, DHCP, ARP, etc.), and Wireshark/TCPDump.
Scripting Should be familiar in scripting in at least one of the following: python, perl or a similar language.
Risk Analysis Taking a vulnerability in a particular environment and understanding the practical associated risk.
Leadership - Influence without authority, take initiative and develop the program further. Act as an escalation and coordinate shift schedules.
Qualifications:
Bachelors degree in Computer Science, Engineering, Information Technology, Cybersecurity, or related field.
Minimum five (5) years of professional experience in incident detection and response, malware analysis, or digital forensics.
Must have at least one (2) of the following certifications:
SANS GIAC: GCED, GCIA, GCFA, GPEN, GWAPT, GCFE, GSNA, GPPA, GAWN, GWEB, GNFA, GREM, GXPN, GMON, GCIH
ISC2: CCFP, CCSP, CISSP
Cisco: CCNA, CCNP
CERT: CSIH
EC Council: CEH, ENSA, CNDA, ECSS, ECSP, ECES, CHFI, LPT, ECSA, or ECIH
Offensive Security: OSCP, OSCE, OSWP and OSEE
EnCase: EnCE
In addition, minimum of three (3) years of specialized experience in one or more of the following areas:
Security Assessment or המשרה מיועדת לנשים ולגברים כאחד.