Responsibilities:

• Proactively identify and assess threats to clients users, network and data
• Monitor and respond to reports of malicious activity
• Respond and investigate intrusions and security events
• Demonstrate an understanding of Client's Funds threat landscape
• Perform thorough analysis of attacks and anomalous network behavior
• Provide summarized and detailed analysis and documentation in support of ESEC
• Perform proficient forensic analysis using security tools and processes
• Identify Actionable Intelligence by processing Threat Intelligence (TI)
• Collaborate with Client's business units, partners and individuals to mitigate security threats
• Advise the CISO and ESEC Team on matters involving organizational, strategic, tactical, and security best practices related to forensics and security incidents management
• Attend meetings/Represent ESEC as a Senior Lead for all security matters
• Create Standard Operating Procedures and training documents

Technical Knowledge and Skills:

• Minimum of 5+ years of technical experience conducting security incident response and forensic analysis
• Working experience of obtaining Cyber Threat Intelligence and making the information usable through the security incident process
• Working experience of applying IOCs to identify threats in current environment and apply information to prevent future vulnerabilities in infrastructure.
• Technical security project management skills.
  Working experience using best practices standards and frameworks: ISO 27001/27002; PCI DSS v4, GLBA; HIPPA/HITECH; NIST 800-53; CIS CONTROLS, NIST CSF; CIS RAM

Working Experience:

• Hardware: Network Switches, Routers, Load Balancers, Servers, Storage Systems, End-User Systems, Mobile Devices, or other devices that enable the organization to complete its mission.
• Operating Systems: UNIX, LINUX, WINDOWS.
• Network: LAN WAN, Internet, Proxy/Filtering, Firewall, VPN, DMZ
• Network Protocols: TCP/IP, SNMP, SMTP, NTP, DNS, LDAP, NFS, SAMBA, etc.
• Databases: Oracle, SQL, MYSQL.
• Cloud Platforms: IAAS, PAAS, SAAS.
• Security Concepts: Encryption, Hardening, etc.
• Security GRC.
• Forensic Analysis Tools.