全职 Security Analyst L3 工作, 薪水, Ensign InfoSecurity Federal Territory 公司招聘中 - Ricebowl

Responsibilities

• Setup and operating Managed Endpoint and Detection Response (MDR) program and proposing enhancement to achieve better efficiency/ effectiveness
• Operating Network Traffic Analytics (NTA) program, identification of abnormalities in client’s environment
• Performs threat hunting within the clients’ technology environments to uncover indicators of threat activities
• Performs digital forensic preservation, legal documentation and electronic discovery for incidents and investigations
• Supports the development of tactics, techniques, and procedures in providing proactive threat hunting and analysis against the available information sources (e.g. Netflow, DNS and Firewall logs, etc.)
• Supports the identification and documentation of Indicators of Compromise (IoCs)
• Leverages internal and external resources to research threats, vulnerabilities and intelligence on various threat actors and exploitation tools and platforms
• Use an analytics platform to identify threats in the available information repositories
• Perform threat research to identify potential threat vectors and work with multi-disciplines to improve prevention and detection methods
• Identify gaps in an organisation’s measurement metrics, telemetry and logging capabilities and propose enhancement strategies to achieve the intended outcomes
• Work with client’s appointed Incident Response Management team for cyber security incidents such as data security breach, Advanced Persistent Threat (APT)

Requirements

• Bachelor’s Degree in Computer Engineering, Computer Science, Cyber Security, Information Security or other equivalents
• Has proper understanding of MITRE ATT&CK, attackers’ possible TTPs
• 1 to 3 years of experience with threat hunting
• 1 to 3 years of experience in incident response handling
• 1 to 2 years of experience with digital forensics investigations
• Experience in consulting, including both internal and client facing experiences
• Ability to obtain a security clearance
• Ability to travel 20% of the time