Level 3 Security Incident Response Senior Specialist

This role will support the follow-the-sun principle of incident handling within ABB. The IS Level 3 Incident Response Senior Specialist will support the Security Incident Response Service Manager in the delivery of the Security Incident Service to the business stakeholders.

This role is contributing to the Core IS Services.

• Handling Security Incidents assigned by the Security Incident Service Manager
• Ensuring that incidents are handled according to agreed procedures. Investigates escalated incidents and seeks resolution. Facilitates recovery, following resolution of incidents.
• Ensuring that resolved incidents are properly documented and closed
• Analyzing causes of incidents, and informs service owners in order to minimize probability of recurrence, and contributes to service improvement. Analyses metrics and reports on performance of incident management process Work with our service providers to ensure the proper implementation of the Security Incident Process and Policies Work closely with Security Incident Service Manager to identify areas of improvement for the Security Incident Process and Policies
• Work with countries, businesses and regions to identify key resources that can assist in the Security Incident process and incident handling
• Defining standard methods and processes for incident resolution, delegates them to the back-office, and oversees the work of the back-office.
• On assignment is involved in the installation, management, maintenance, and optimization of IS security solutions/services.

Qualifications for the role

• 10 years in IT, 5 in Security incident response.
• Graduate level with IT focus or equivalent practical experience Security Certification (CISSP, CISM, GSEC or others).
• Experience in AntiVirus Technology and AV Tools
• Experience in EDR Technology and EDR Tools
• Experience in log analysis of Firewalls, Proxy servers, Operation Systems, Databases, preferably via a SIEM Servers/clients / mobile devices / appliances / OSs / common applications, databases / middleware in-depth knowledge