Security Analyst - CERT Team

- - - - - - - - - - - -

KEY EXPECTED ACHIEVEMENTS

1. Security Incident Handling:

Analyze and confirm the severity of security incidents based on available data.Follow documented incident response procedures to resolve threats efficiently.Collaborate with technical experts to develop and implement remediation plans.Track and monitor corrective actions, ensuring stakeholders are informed and engaged.Write detailed incident reports, including "hot" and "cold" feedback, for major incidents.Participate in crisis management, including artifact collection, risk analysis, and first-level threat assessments.

2. Projects, Continuous Improvement, and Expertise Sharing:

Stay updated on the latest incident response techniques through training and daily monitoring.Provide technical expertise for projects, including tool evaluations, risk analysis assistance, and technical audits.Propose and develop new detection scenarios, automation tools, or enhancements to improve productivity.Conduct team knowledge-sharing sessions by presenting in-depth technical topics.Contribute to the broader expertise missions within the team based on skillsets.

Experience Requirements:

10–12 years of relevant experience in cyber security, with a focus on security incident handling, detection, and analysis.

Qualifications and Skills:

Technical Skills:

Data Analysis & SIEM Tools:Proficient in SPL (Search Processing Language) for data analysis, threat hunting, and creating dashboards.Strong experience with SIEM tools like Splunk (Preferred), Q Radar or Sentinel.Endpoint Protection (EPP) & Endpoint Detection and Response (EDR):Hands-on experience with tools such as:Trend Micro Deep SecurityMicrosoft DefenderPalo Alto CortexTehtris eGambitNetwork Security & Firewalls:Knowledge of firewalls, IDS/IPS, VPNs, and network devices such as:CiscoPalo Alto Global ProtectProficiency in analyzing firewall logs and interpreting PCAPs using tools like Wireshark.Operating Systems & Scripting:In-depth understanding of Windows and Linux log analysis.Knowledge of PowerShell scripting and other system scripting languages.Investigative Skills:Ability to autonomously investigate alerts from detection to resolution.

Behavioral Competencies:

Strong analytical and problem-solving skills.Ability to work independently while collaborating with a global team.Excellent communication and report-writing skills.Passion for continuous learning and knowledge sharing.Flexibility to work in a fast-paced environment and support on-call rotations.

Availability

The role operates on a follow-the-sun model, requiring collaboration with the global Group CERT team. Analysts must operate 3-4 days from the office and be available on a rotation basis for Weekend on call support.