Manager – Cyber Defense Center
Primary Responsibility
- Managing CDC operations @ 24
- Understanding of alerts (SIEM, EDR, DLP), handling escalations, communications, notifications of higher priority incidents.
- Respond to Information, Cyber and privacy incidents in defined SLA.
- Technically investigate and Communicate progress status to senior management and other stakeholders.
- Coordinate with internal and external teams to get the required information / support during the investigation.
- Manage CIRT calls with required stakeholders.
- Manage the communication with senior management, internal business units, and external vendors / partners.
- Prepare detailed incident investigation report; liaise with Legal, Business, HR and other team members to finalize the report.
- Measure & report incident metrics, KRI / KPI, dashboard etc.
Primary Internal Interactions
MSSP Personnel / Third Party service providersTechnology Management functions / Business Application OwnersLegal and Business Operations TeamHR and Facility Management TeamInformation Security Personnel, SOCRequired Skills
Must Have : Security Incident Investigation, Log Analysis, Log Co-relation, Deep understanding of Incident Management Cycle, Frameworks & Standards, Cloud Solutions & Security (Basics)
Desirable : Threat Analysis / Modeling / Hunting, Malware Analysis, Forensics overview, Architecture review of SIEM, DLP, EDR, XDR
Qualification / Others
Bachelor's degree in computer science, engineering or related field.Good understanding of Information Security, Systems Security, Operating Systems, Threat modelingPrior experience in Analyzing Security Alerts / Incident, Threat Intelligence or Security MonitoringGood understanding of digital forensics investigation (Imaging, Indexing, data extraction, file carving …etc)Decent communication skill including English language (Oral and written)One or more of the following / equivalent certifications : CEH, CHFI, GCIH, CISM, Comp TIAOpen for, 24
7 working environmentExperience
5-6 years of relevant experience in Cyber Security , 1-2 yrs. experience in Security Operations (Must), Security Technology Management
Experience with SIEM, EDR or investigation tools like EnCase, Oxygen, Falcon, Wireshark etc. would be added advantage