DTICI_CSOC Security Incident Manager_T7

Tasks

Experience: 8 -12 years

Job Role:

• Microsoft Expertise: Proficiency in Microsoft security products such as Microsoft Defender and Microsoft Sentinel.
• Certifications: Security certifications such as CISSP, Security+, CISM, SANS SOC Manager, GCIH, GCIA, Microsoft Certified: Security, Compliance, and Identity Fundamentals, EC council certified SOC Analyst.
• Technical Skills: Deep understanding of security technologies, SIEM, IDS/IPS, cloud environments, and networking protocols. Cyber kill chain, and NIST Incident Response Lifecycle. Familiarity with OWASP, Cyber Kill Chain, and the MITRE ATT&CK framework.
• Incident Response Management: Coordinate the response to security incidents, from identification to resolution.
• Incident Management: Development and implementation of incident management processes.
• Escalation management: Escalation of serious security incidents to senior management and relevant stakeholders.
• Coordination and communication: Collaborate with internal teams and external partners to ensure effective incident response.
• Lessons learned: Conducting post-incident analyses and identifying opportunities for improvement.
• Documentation and reporting: Documentation of all steps and decisions during incident response as well as creation of reports.
• Continuous improvement: Monitoring and evaluating the effectiveness of incident response processes and implementing improvements.

same as above

Qualifications

Bachelor’s/master’s degree in computer science, Information Systems, Engineering, Information Security, Cybersecurity, or a related field is required.

Arbeitsort