Perform investigations and root cause analysis to identify attack vectors, tactics, and impact
Conduct comprehensive security event log analysis to validate security detections, investigate alerts, and identify attacks across multiple data sources including:
Endpoint system logs or Endpoint detection and response (EDR) telemetry...
Advanced Exercises: Design and oversee high-quality TabletopExercises (TTX) for various stakeholders (system owners, SIROs, CISOs, CIOs).You will evaluate external vendors to ensure these exercises are realistic,comprehensive, and push the limits.
Chaos Testing: Drive the adoption of chaos testing acrossagencies to validate the adequacy of resiliency plans and identify hiddenfailure points in critical systems.
Capability Building: Continuously assess the operationalreadiness of the Family and lead initiatives to bridge identified gaps inincident management....