Cyber Threat Investigator

The Cyberwatcher role involves maintaining expert knowledge of Advanced Persistent Threat (APT) Tools, Techniques, and Procedures (TTPs), as well as forensics and incident response best practices. You will be expected to use threat intelligence and threat models to create threat scenarios, conduct threat-hunting campaigns, and analyze various data sets from diverse sources. Proactive research on systems and networks to identify advanced threats is a crucial aspect of this role. Reporting risk analysis and threat findings to stakeholders, providing automated alerts for emerging threats, and collaborating with different teams to enhance security checks and detection performance are also part of your responsibilities. Participation in PTXs (purple team exercises) to monitor new detection capabilities, managing reports, dashboards, and metrics for CyberSOC KPIs, and presenting findings to senior management and stakeholders are essential tasks. Additionally, working closely with key stakeholders in technology, application, and cybersecurity to develop targeted use cases addressing specific APT behaviors is a key part of this role. As a Cyberwatcher, your performance will be evaluated based on your ability to maintain expert knowledge of APT TTPs, utilize threat intelligence effectively, conduct threat-hunting campaigns, analyze data sets, proactively research threats, report findings to stakeholders, provide automated alerts for threats, collaborate with various teams, participate in PTXs, manage reports and metrics, and develop targeted use cases for APT behaviors. Your success in these areas will contribute to the overall security and effectiveness of the organization's cybersecurity measures.,