My client is looking for an MDR Cyber Security and TI Analyst to join them in their Managed Security Services (MSS) division. This is to support security monitoring and incident handling and act as an escalation point to ensure the confidentiality, integrity, and availability of information assets. The candidate must be capable of performing full root cause analysis and be familiar with threat hunting. The candidate must also keep up-to-date with the latest emerging threats and vulnerabilities to be able to provide context to incidents and guide threat hunting and incident response activities.
Minimum requirements:
– Experience with EDR and/or Sysmon, Anti-Virus, SIEM, general security analytics, and log sources
– ITIL proven skills in a SOC functional unit
– Must have the ability to understand large, complex systems and be able to focus on specific details or subsystems, their vulnerabilities, and linkages
– Experience dealing with malware, attack vectors, and the ability to perform pattern analysis and discover the root cause
– Keeping up to date with attacker techniques, such as by reading blogs and whitepapers on recent threats
– Requires basic knowledge of hardware/software architecture and domains in IT operations
Technical Knowledge:
– Strong knowledge of endpoint/EDR, Firewalls, web & e-mail security
– Ability to reverse engineer malware to discover IOCs, identify the malware family or if it is unknown, etc.
– Knowledge of pivoting to find more artefacts related to an incident
– Knowledge of networking protocols, Switches, Routers etc.
– Knowledge of SIEM and querying log sources
– Knowledge of root cause analysis and escalation procedures
Industry-specific technical knowledge, such as the use of specific analysis tools
* Competitive Salary + Performance bonus + Medial + Pension.
* Remote but does require some site attendance.
|
