Security Analyst - CERT Team

Security Analyst - CERT Team

KEY EXPECTED ACHIEVEMENTS

1. Security Incident Handling:

• Analyze and confirm the severity of security incidents based on available data.
• Follow documented incident response procedures to resolve threats efficiently.
• Collaborate with technical experts to develop and implement remediation plans.
• Track and monitor corrective actions, ensuring stakeholders are informed and engaged.
• Write detailed incident reports, including hot and cold feedback, for major incidents.
• Participate in crisis management, including artifact collection, risk analysis, and first-level threat assessments.

2. Projects, Continuous Improvement, and Expertise Sharing:

• Stay updated on the latest incident response techniques through training and daily monitoring.
• Provide technical expertise for projects, including tool evaluations, risk analysis assistance, and technical audits.
• Propose and develop new detection scenarios, automation tools, or enhancements to improve productivity.
• Conduct team knowledge-sharing sessions by presenting in-depth technical topics.
• Contribute to the broader expertise missions within the team based on skillsets.

Experience Requirements:

• 10-12 years

  of relevant experience in cyber security, with a focus on security incident handling, detection, and analysis.

Qualifications and Skills:

Technical Skills:

• Data Analysis & SIEM Tools

  :
• Proficient in

  SPL (Search Processing Language)

  for data analysis, threat hunting, and creating dashboards.
• Strong experience with

  SIEM tools

  like

  Splunk (Preferred)

  ,

  Q Radar

  or

  Sentinel.

• Endpoint Protection (EPP) & Endpoint Detection and Response (EDR):

• Hands-on experience with tools such as:

• Trend Micro Deep Security

• Microsoft Defender

• Palo Alto Cortex

• Tehtris eGambit

• Network Security & Firewalls:

• Knowledge of

  firewalls

  ,

  IDS/IPS

  ,

  VPNs

  , and network devices such as:

• Cisco

• Palo Alto Global Protect

• Proficiency in analyzing

  firewall logs

  and interpreting

  PCAPs

  using tools like

  Wireshark

  .

• Operating Systems & Scripting:

• In-depth understanding of Windows and Linux log analysis.
• Knowledge of

  PowerShell scripting

  and other system scripting languages.

• Investigative Skills:

• Ability to autonomously investigate alerts from detection to resolution.

Behavioral Competencies:

• Strong analytical and problem-solving skills.
• Ability to work independently while collaborating with a global team.
• Excellent communication and report-writing skills.
• Passion for continuous learning and knowledge sharing.
• Flexibility to work in a fast-paced environment and support on-call rotations.