ASM Expert
|
||||||||||||||||||
|
الوصف الوظيفي Looking after the day to day activities of security monitoring and incident handling to ensure that all raised incidents are being handled swiftly and up to customer satisfaction. enriching the security events with business context, business impact and threat operations, monitoring and event intelligence BA/BS or MA/MS in Engineering, Computer Science, Information Security, or Information Systems required and 5+ years of experience in one or more of the following areas: proactive and reactive hunt techniques, zero-day exploit activities, malware identification Expert knowledge of network monitoring and network exploitation techniques Knowledge around common web application attacks including SQL injection, cross-site scripting, invalid inputs and forceful browsing Required certifications include, Security+, CEH, GCIA, GCIH, CISSP or similar Experience working with cyber security tools and software such as Splunk, Symantec End Point, TrendMicro Antivirus, McAfee Web Gateway, Checkpoint Firewalls, Bluecoat, Sourcefire, Active Directory, or relevant cyber security assets المهارات Analyze security events to verify incidents and their potential impact and risk to the clients. Prepare and share incident analysis form to initiate response to validated events by engaging the required teams or resourcestoaddress the security incidents. Perform detailed analysis of incidents in order to gather more information on the incidents. Identify mechanism to contain and eradicate the incident. Once the incident has been contained and eradicated, ensure that proper recovery actions are performed. Investigate raised IT security incidents and initiate resolution by engaging the responsible teams, and escalating attention as needed to address threats and close risks. Supporting in documenting new playbooks and updating existing ones تفاصيل الوظيفة
|
||||||||||||||||||
Printable Page 
Report Advertisement