Job Description

Responsible for monitoring, analyzing, and responding to security events and incidents. Supports threat detection, vulnerability management, and daily operational security tasks to ensure the confidentiality, integrity, and availability of organizational systems.

Identifies, analyzes, monitors, mitigates and manages threats and vulnerabilities to IT systems and networks.

Uses defensive measures and multi-source information to report events and respond to incidents.

Uses data collected from cyber defense tools to analyze events that occur within their organization to detect and mitigate cyber threats.

Investigates, analyzes and responds to cybersecurity incidents.

Collects and analyzes digital evidence, investigates cybersecurity incidents to derive useful information to mitigate system and network vulnerabilities.

Identifies, collects, examines and preserves evidence using controlled and documented analytical and investigative techniques.

Analyzes (by disassembling and/or decompiling) malicious software

, understands how it works, its impact and intent and recommends mitigation techniques and incident

response actions.

Collects and analyzes multi-source information about cybersecurity threats to develop deep understanding and awareness of cyber threats and actors' Tactics, Techniques and

Procedures (TTPs), to derive and report indicators that help organizations detect and predict cyber incidents and protect systems and networks from cyber threats.

Skills

• Advanced knowledge of SIEM, EDR, MDR, and log analysis • Strong understanding of cyberattack methods and mitigation techniques • Experience with incident handling, investigation, and containment • Familiarity with malware analysis and threat intelligence • Excellent analytical, documentation, and communication skills
• Knowledge of computer algorithms.
• Knowledge of cryptography and cryptographic key management concepts.
• Knowledge of appropriate data backup and recovery methods and solutions, including testing
• Knowledge of

• cybersecurity considerations for database systems
• Knowledge of host and network access control mechanisms.
• Knowledge of sources of information relating to the identification and
• Knowledge of IT security principles and methods.
• Knowledge of best practice network traffic analysis methods.
• Knowledge of operating systems.
• Skills
• Skill of identifying, capturing, containing and reporting malware.
• Skill in using intrusion detection technologies to detect host and network-based intrusions.
• Skill in determining the normal operational state for security systems and how that state is affected by change
• Skill in configuring and utilizing network protection components.
• Skill in conducting cybersecurity audits or reviews of technical systems.
• Skill in system, network and OS hardening techniques
• Skill in recognizing vulnerabilities in security systems.
• Skill in using risk scoring to inform performance-based and cost-effective approaches to help an organization manage its cybersecurity risk
• Skill in collecting data from a variety o

• للتقديم الان