Years of experience expected: Minimum 5 years
Responsibilities
Must-have skillset:
o Support and maintain vulnerability detection and mitigation based on best practice
o Apply Threat and Vulnerability Management program by applying information security practices and develop its maturity
o Participate in incident response triage and proactive analysis in information security related vulnerabilities detection and mitigation in the network, systems and/or application.
o Analyze vulnerability feeds and support the CDC operations with IOC/IOA based on vendor advisories, security alerts and threat landscape.
o Provide analysis and apply all CVSS scoring mechanisms, that associated to all related vectors/strings of vulnerabilities.
o Detect, analyze and acknowledged CDC operation and EDR team for latest threats/detection signature and creation of use cases that able to monitor or drop related vulnerability exploitations.
o Provide regular updates to the stakeholders on security assessment reports with detailed security issues and recommend workarounds.
o Regular tracking and maintain the vulnerability process cycle to ensure timely closure of all vulnerability findings.
o Actively investigate the latest in security vulnerabilities, vendor advisories, security incidents, and penetration techniques and notify stakeholders when appropriate.
o Provide support and participate in ongoing and future projects of Vulnerability Management
o Provide security assessment and consultation on firewall/network ELR
o Knowledge in NIS2 structure, functions, governance, management, communication and reporting.
o Ensure Incident Monitoring, Posture Review, Approval Support and Reporting service related to NIS2 compliance and its requirements.
Qualifications
Must-have skillset:
o Support and maintain vulnerability detection and mitigation based on best practice
o Apply Threat and Vulnerability Management program by applying information security practices and develop its maturity
o Participate in incident response triage and proactive analysis in information security related vulnerabilities detection and mitigation in the network, systems and/or application.
o Analyze vulnerability feeds and support the CDC operations with IOC/IOA based on vendor advisories, security alerts and threat landscape.
o Provide analysis and apply all CVSS scoring mechanisms, that associated to all related vectors/strings of vulnerabilities.
o Detect, analyze and acknowledged CDC operation and EDR team for latest threats/detection signature and creation of use cases that able to monitor or drop related vulnerability exploitations.
o Provide regular updates to the stakeholders on security assessment reports with detailed security issues and recommend workarounds.
o Regular tracking and maintain the vulnerability process cycle to ensure timely closure of all vulnerability findings.
o Actively investigate the latest in security vulnerabilities, vendor advisories, security incidents, and penetration techniques and notify stakeholders when appropriate.
o Provide support and participate in ongoing and future projects of Vulnerability Management
o Provide security assessment and consultation on firewall/network ELR
o Knowledge in NIS2 structure, functions, governance, management, communication and reporting.
o Ensure Incident Monitoring, Posture Review, Approval Support and Reporting service related to NIS2 compliance and its requirements.