Consultant - CSIRT L1 Analyst

Job Description

*With a startup spirit and 90,000+ curious and courageous minds, we have the expertise to go deep with the world s biggest brands and we have fun doing it. Now, we re calling all you rule-breakers and risk-takers who see the world differently and are bold enough to reinvent it. Come, transform with us.Inviting applications for the role of Consultant CSIRT L1 AnalystAre you the one that we are looking for Messaging and Communities team is seeking a knowledgeable and talented Senior Engineer to provide technical expertise and support/enhancement of our Messaging and Communities solutions. Core environments we support include Slack, MS Teams and Skype for Business (on-premise).This senior Engineer will also collaborate with other client information technology teams such as Identity, Information Management and Hosting to ensure alignment with client s overall IT architecture plan.

• 1. Roles and Responsibilities
• Fully understand and implement the capabilities of the SIEM solution, preferably Splunk
  • Functional capabilities
  • Reporting, auditing, and alerting,
  • Rule creation and management
  • Product roadmap and application of SIEM in CLIENT
  • Industry knowledge of SIEM and threat intelligence and its interactions with other technologies including but limited to Active Directory, Log Management, Ticketing, Information Management, Cloud Services, Devices, etc.
  • Experience with log sources in the cloud and supporting technology e.g. AWS Cloudtrail / Cloudwatch, Azure Operational Insights, Event Hubs
• Collect, monitor and analyze data produced by the CLIENTs System
• Well-versed and/or skilled in any one of the Automation or Orchestration Tools (Demisto, Komand, Resilient, Phantom or similar).
• Review and prepare monthly status reports and statistics
• Follow-up on incidents, issues, and concerns related to data loss
• Provide backup to other CLIENT Security Architects to audit, monitor and report on the various components of CLIENT IT security
• Balance cost, risk, security, user convenience, and business requirements in all aspects of work

Provide input and represent client and CLIENT interests in the areas of

• Security Policy
• Organization Security 3rd Party Security, Outsource Security, Information Security Infrastructure
• Asset Classification and Control
• Personnel Security
• Physical and Environmental Security related to IT
• Communications and Operations Management
• Access Control
• System Development and Maintenance
• Business Continuity Management
• Compliance and Audit
• Incident Response and Investigation
• Work across the firm to identify risk, develop and plan risk mitigation strategies and ongoing audit functions related to client information
• Provide timely response to client inquires by completing client questionnaires, writing client responses and participating on conference calls and meetings with clients, CLIENT Partners, case teams, Legal and Risk Departments
• Incident response management for client security incidents
• Update documents and propose new documents and materials in order to respond to requests quickly and completely

1. 1. Qualifications we seek in you

What are the minimum prior qualifications to be an applicant for this role:

• Master s or Bachelor s degree (or equivalent)
• Significant information security experience with a very strong technical background
• Significant information security and risk management experience in a multinational enterprise
• Threat Hunting and Incident Response experience (from a Consultancy or SOC environment)
• Significant knowledge and experience with Splunk
• Preferred certifications: GCIA, GCIH, GREM, CISSP, CCSP
  1. Mandatory qualifications In addition to above

Technical and functional expertise

• Requires an advanced level of professional knowledge in information technology and security developed through a combination of advanced degrees in information technology and hands on experience.
• Knowledge of the legal and regulatory landscape related to security and privacy in an international environment
• Very strong business sense with ability to relate technology issues to business

Problem solving, analytical skills and decision-making

• Requires strong analytical skills and abilities including an extensive knowledge of software, data base, operating systems, client server architecture and voice and data communication services and facilities, security and privacy, in an international setting
• Collect, review, and analyze various metrics, which help to measure and monitor systems, departmental performance, and quality. Discern and analyze trends.
• Review and prepare monthly status reports and statistics
• Manage group and project budgets

Communication, interpersonal and teaming skills

• Outstanding verbal and written communications skills are necessary because of the requirement to represent client in communications with other clients.
• Calm demeanor, grace under fire, outstanding listening skills

Leadership, impact and change

• Ability to lead and motivate subordinates to provide maximum value
• High level of initiative and self-motivation, resourceful, and patient with an iterative process
• Ability to gain trust and commitment of others at different levels of the organization
• Proven ability to challenge traditional way of operating and moving beyond the obvious
• Translates CLIENTs broader strategic objectives and cascades these into own work plans, metrics and team work plans
• Works effectively with significant ambiguity and fluctuating priorities and constrains

Customer and business focus

• Focuses on the most critical issues that have the highest impact on the organization and business needs
• Working mode: enabling , value adding and expanding
• Treats all others with respect; generate trust

People management

• This position may require interaction with CLIENT Partners, CLIENT Case Team staff, client legal and security staff, Administrative Management, vendors, IT Management and Staff, Legal
• Department, Finance, Vendors, etc. Very strong relationship skills are essential. Excellent Leadership and teaming skills are required.

Values and ethics

• Strong sense of confidentiality, integrity, and personal accountability
• Treats others with respect and generates trust
• Establish relationships based on respect, trust and integrity.

Work Environment:

• Must be able to perform successfully in a fast-paced, intellectually intense, service-oriented environment and to interpret rules and guidelines flexibly to enhance the business and in keeping with clients values and culture.
• Experience working successfully within a complex, geographically disparate organization is essential.
• It is necessary to have the ability to understand and manage complex reporting relationships and incorporate multiple cultures.

,

Keyskills :
strong analytical skillsenvironmental impact assessmentuse casesit managementclient servercustomer focuslog managementservice levelsrisk managementrisk mitigationit architectureactive directory