About the role
structured by ORIJob Title: Senior Associate, Cyber Operations Job Code: 7473 Department: Digital Security Group Subtitle: C yber Incident Response Key Responsibilities: Apply your knowledge of IT security, security operations, and incident response to manage and oversee a shift of 24x7 cyber security operations and incident…
What you will do
- Apply your knowledge of IT security, security operations, and incident response to manage and oversee a shift of 24x7 cyber security operations and incident responders. Document processes and procedures comprehensively in the form of playbooks and reference guides.
- Handle and coordinate tasks such as incident management, threat hunting, forensic analysis, and remediation efforts to mitigate threats. Conduct regular assessments to identify vulnerabilities and insecure configurations, and review security change requests to ensure robust protective measures.
- Configure and monitor security tools, including alerts, correlation rules, and reporting mechanisms. Implement automation and orchestration to improve the efficiency and effectiveness of security monitoring and response processes, aiming for a unified "single pane of glass" solution.
- Leverage intelligence to apply threat monitoring and vulnerability detection to evaluate and respond effectively to events and developing risk severity level and mitigation approaches, incorporating feedback and lessons learned into enhanced preventive and detective controls.
- Stay updated on the latest security practices and technologies, mentor the team through knowledge-sharing sessions, and build strong relationships with internal tech groups to ensure strategic alignment and foster collaboration.
What they are looking for
- Bachelor’s degree with 3-5 years of experience in Cyber security operations, with relevant certifications such as: CISSP, CCSP, CCSK, GSEC, GCIH, GCFE, GCFA, SC-200, CEH, and AZ-900
- Both project and operational experience in security monitoring, security operations, and incident response activities; Experience implementing processes, including playbooks and
- Excellent verbal/written communication, collaboration, analytical and presentation skills to lead an environment driven by customer service and teamwork. Experience leading meetings and operating effectively in a matrixed environment.
- Ability to participate in development of resource plans and project estimation.
Nice to have
- Experience with scripting or automation , and ServiceNow is a plus.
Full posting text
Job Title: Senior Associate, Cyber Operations
Job Code: 7473
Department: Digital Security Group
Subtitle: C yber Incident Response
Key Responsibilities:
Apply your knowledge of IT security, security operations, and incident response to manage and oversee a shift of 24x7 cyber security operations and incident responders. Document processes and procedures comprehensively in the form of playbooks and reference guides.
Handle and coordinate tasks such as incident management, threat hunting, forensic analysis, and remediation efforts to mitigate threats. Conduct regular assessments to identify vulnerabilities and insecure configurations, and review security change requests to ensure robust protective measures.
Configure and monitor security tools, including alerts, correlation rules, and reporting mechanisms. Implement automation and orchestration to improve the efficiency and effectiveness of security monitoring and response processes, aiming for a unified "single pane of glass" solution.
Leverage intelligence to apply threat monitoring and vulnerability detection to evaluate and respond effectively to events and developing risk severity level and mitigation approaches, incorporating feedback and lessons learned into enhanced preventive and detective controls.
Stay updated on the latest security practices and technologies, mentor the team through knowledge-sharing sessions, and build strong relationships with internal tech groups to ensure strategic alignment and foster collaboration.
Develop work product(s) and support small projects, threat assessments, and incident investigations while, managing deadlines, expectations, and contributing to staffing decisions.
Qualifications:
Bachelor’s degree with 3-5 years of experience in Cyber security operations, with relevant certifications such as: CISSP, CCSP, CCSK, GSEC, GCIH, GCFE, GCFA, SC-200, CEH, and AZ-900
Both project and operational experience in security monitoring, security operations, and incident response activities; Experience implementing processes, including playbooks and
Experience with scripting or automation , and ServiceNow is a plus.
Excellent verbal/written communication, collaboration, analytical and presentation skills to lead an environment driven by customer service and teamwork. Experience leading meetings and operating effectively in a matrixed environment.
Ability to participate in development of resource plans and project estimation.