Cyber Defense Incident Responder

Job Requirements

Job Title:

Cyber Defence Incident Responder

Function/ Department:

Information Security Group

Job Purpose

Investigates, analyses, and responds to cyber incidents within the network environment or enclave.

Roles & Responsibilities

• Coordinate and provide expert technical support to enterprise-wide cyber defence technicians to resolve cyber defence incidents.
• Correlate incident data to identify specific vulnerabilities and make recommendations that enable expeditious remediation.
• Perform analysis of log files from a variety of sources (e.g., individual host logs, network traffic logs, firewall logs, and intrusion detection system [IDS] logs) to identify possible threats to network security.
• Perform cyber defence incident triage, to include determining scope, urgency, and potential impact, identifying the specific vulnerability, and making recommendations that enable expeditious remediation.
• Perform real-time cyber defence incident handling (e.g., forensic collections, intrusion correlation and tracking, threat analysis, and direct system remediation) tasks to support deployable Incident Response Teams (IRTs).
• Receive and analyse network alerts from various sources within the enterprise and determine possible causes of such alerts.
• Track and document cyber defence incidents from initial detection through final resolution.
• Write and publish cyber defence techniques, guidance, and reports on incident findings to appropriate constituencies.
• Collect intrusion artifacts (e.g., source code, malware, Trojans) and use discovered data to enable mitigation of potential cyber defence incidents within the enterprise.
• Serve as technical expert and liaison to law enforcement personnel and explain incident details as required.
• Coordinate with intelligence analysts to correlate threat assessment data.
• Monitor external data sources (e.g., cyber defence vendor sites, Computer Emergency Response Teams, Security Focus) to maintain currency of cyber defence threat condition and determine which security issues may have an impact on the enterprise.
• Coordinate incident response functions.
  

Secondary Responsibilities

• Perform cyber defence trend analysis and reporting.
• Perform initial, forensically sound collection of images and inspect to discern possible mitigation/remediation on enterprise systems.
• Employ approved defence-in-depth principles and practices (e.g., defence-in-multiple places, layered defences, security robustness).
  

Education Qualification

Graduation: Bachelor of Commerce (B.com) / Bachelor of Science (B.Sc) / Bachelor of Arts (BA) / Bachelor of Business & Insurance (BBI) / Bachelor of Management Studies (BMS)Post-graduation: Master of Business Administration (MBA) / Master of Commerce (M.com) / Master of Arts (MA)

Experience:

5 to 10 of relevant years of experience.