обновлено 9 дней назад
Cyber Incident Responder
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Cyber Incident Responder (Security/Incident Response): Lead security use case definition, detection engineering, and incident response for IT Production Security across complex environments with an accent on MITRE ATT&CK-based detection and 24/7 SOC operations. Focus on threat hunting, security log analysis, incident investigation and closure, and continuous improvement of SOC policies and playbooks.
Location: Hong Kong
Company
is an independent technology consulting firm providing technology guidance and solutions to businesses through international teams across Information System & Digital, Telecom, Life Sciences, and Engineering.
What you will do
- Lead the definition, design, implementation, and enrichment of security use cases based on real-world attack scenarios and MITRE ATT&CK.
- Develop detection, protection, and mitigation use cases for ongoing security threats.
- Conduct threat research and hunting to improve detection capabilities.
- Support the 24/7 regional IT Production SOC and maintain its security detection posture.
- Investigate cyber and IT security incidents, assess severity, and coordinate remediation and closure.
- Improve SOC policies, operational playbooks, risk mitigation plans, and response processes.
Requirements
- 7+ years of experience as a security professional.
- Experience designing and developing security use cases, with an understanding of Java.
- Proficiency in Linux environments, including Red Hat and Ubuntu.
- Hands-on experience with SIEM products, incident management, threat hunting, event analysis, investigation, and reporting.
- Ability to interpret security logs, create threat models, work with large data sets, and apply a SecOps-DevOps and automation mindset.
- Fluent English is required. Strong analytical, communication, problem-solving, adaptability, and collaboration skills are expected.
Culture & Benefits
- International community representing more than 110 nationalities.
- Internal Academy with more than 250 training modules.
- Trust-focused environment with opportunities for professional growth.
- Regular internal events, including afterworks and team-building activities.
- Opportunities to lead social and environmental impact projects through the WeCare Together program.
Hiring process
- Brief virtual or phone call.
- Approximately three interviews, depending on seniority.
- Potential case study, technical assessment, role play, or problem-solving exercise.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →