Job Description

Maintain situational awareness of cyber activity by reviewing open source reporting for new vulnerabilities, malware, or other threats that have the potential to impact the organization Perform cyber threat intelligence analysis, correlate actionable security events, perform. Network traffic analysis using raw packet data, net flow, IDS, IPS, and custom sensor output as it pertains to the cyber security of communication networks, and participate in the coordination of resources during incident response efforts. Coordinate resources during enterprise incident response efforts, driving incidents to timely and complete resolution. Be well-versed with the cyber killchain and attacker tools, tactics and procedures Employ advanced forensic tools and techniques for attack reconstruction, including forensic analysis and volatile data collection and analysis. Conduct malware analysis providing indicators for enterprise defensive measures. Analyze reports to understand threat campaign(s) techniques, lateral movements and extract indicators of compromise (IOCs). Recommend sound remediation and recovery strategies, suggest defensive policy enhancements and information technology procedures. Interface with external entities including law enforcement organizations, intelligence community organizations and other government agencies as and when required. Deliver status reports, briefings, recommendations, and findings to management and executives as required. Awareness of active threat hunting techniques Conduct internal and external trainings on various topics related to Incident Response. To apply, send your resume to [HIDDEN TEXT]

foundit