Sr Incident Response Engineer
On-siteSydney, New South Wales, Australia
Job Summary
Monitor and triage security alerts to investigate and respond to incidents across the enterprise. Collaborate cross-functionally to document, coordinate Incident Response processes, and maintain the Cybersecurity documentation repository including playbooks. Lead incident post-mortems to synthesize lessons learned and provide best practice recommendations through comprehensive written reports. Perform proactive threat hunting to identify emerging threats, vulnerabilities, and new tactics, techniques, and procedures using Threat Intelligence. Analyze opportunities for automation and additional detections. Participate in an on-call rotation for a global organization. Requires 6+ years of cybersecurity experience, Bachelor's degree, and certifications in Cybersecurity.
Required Qualifications
- Bachelor's degree in related field or equivalent years of experience
- 6+ years of experience in the Cybersecurity field
- incident handling/response experience
- Understanding of technical aspects and tools of Cybersecurity
- Working knowledge of common IT technologies and processes
- Familiarity with common Cybersecurity and Information Technology frameworks and standards, such as MITRE ATT&CK, COBIT and ITIL
- Understanding of risk management principles and methodologies
- Ability to transform abstract requirements into cohesive actions
- Excellent written & verbal communication skills
- ability to present technical concepts to non-technical stakeholders
- Strong work ethic, attention to detail, and organizational skills
- Ability to multi-task and manage priorities in a fast-paced environment
- Ability to collaborate in a team setting, as well as work independently
- Conceptual understanding of software development methodologies
- Knowledge of ISO27001/27002, PII, PHI, financial data regulations, data residency requirements, and international regulatory aspects pertaining to sensitive information
Desired Qualifications
- Certifications in Cybersecurity or related
- Experience with application security, SaaS, or cloud security
- Experience with programming or scripting languages
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.