Security Incident Coordination Analyst at Dxctechnology | Torre

Security Incident Coordination Analyst

Emma highlights
This highlight was written by Emma’s AI. Ask Emma to edit it.
Full-time

Legal agreement: To be defined

USD75.4K - 100K/year

~COP150M - 200M/year

+ Equity

+ Bonuses

location_on
Remote (for UK residents)
flightsmode
Visa sponsorship: No
Posted almost 3 years ago

Responsibilities


We are a leading cybersecurity company with a strong focus on incident response and threat management. Our team is dedicated to providing top-notch security solutions to our clients and staying ahead of the latest security threats and vulnerabilities. As a Security Incident Coordination Analyst, you will be responsible for monitoring security tooling, conducting triage and analysis of security alerts and incidents, and coordinating the investigation and resolution of security incidents. You will also be involved in managing security tickets, responding to email inquiries, and providing critical incident response reports. This role requires strong analytical skills, knowledge of protective monitoring tools, and experience in threat and vulnerability management. The ideal candidate will have a sound working knowledge of security best practices, legislation, and the ability to remain calm and focused in high-pressure situations. Responsibilities: - Monitor security tooling, conduct triage and analysis of security alerts and incidents - Validate, verify, and report protective or countermeasure solutions - Coordinate and investigate security incidents through to completion - Work with other resolver groups to respond to and investigate security incidents - Monitor and manage functional mailboxes and respond to email inquiries - Monitor and manage security tickets queues - Review and raise security incidents in ticketing systems - Assist in the completion of security reporting - Compile and present reports using Microsoft PowerPoint and Excel - Provision of Critical Incident Response Report and lessons learnt to key stakeholders - Deal with legal and law enforcement-related issues as required - Periodically review security incidents to perform trend analysis - Respond to incidents as per playbooks and Security Incident Management Process - Act as an advisor to the account concerning Critical Security Advisories - Develop and maintain a critical vulnerability management system - Manage security information requests from the customer - Lead on complex and severe incidents when required - Take responsibility for SIC Team processes and continually review them - Ensure that all obligations are covered off to the agreed timescales and quality - Ensure that the Security Delivery Lead is informed of all relevant Security Incidents and Issues on the account - Provide standby(on-call) cover whilst working on an agreed rota - Work flexible hours when required - Maintain a watching brief on threat actors and advanced persistent threats - Develop skill and knowledge base - Possess experience of handling, responding, and investigating to cyber security incidents - Possess good analytical skills - Experience of log analysis - Knowledge and experience of using Protective Monitoring Tools - Threat and Vulnerability management experience - Experience of malware alert review - Experience of working in SOCS, ticketing systems, and interacting with delivery capabilities - Enthusiastic and committed approach with a track record of building strong, trusted base relationships with colleagues and stakeholders at all levels - A sound working knowledge of security best practice and legislation affecting the security role - Self-motivated and an ability to keep up to date with latest security threats and vulnerabilities and trends - Excellent communication, influencing, negotiating and engagement skills - Possess good leadership skills when interacting with account delivery teams - Sound judgement and decision-making skills - Ability to work to tight timescales - Ability to remain calm and focused in high pressure situations identifying business resources essential to recovery - Experience of writing procedures and reports - Ability to work as part of a team, as well as independently - Recognized security qualification - Security professional with a proven experience within the security industry, the public sector, or armed services - Knowledge of types and sources of tools and equipment required to adequately equip an Incident Response Team - Knowledge of forensic requirements for collecting and presenting evidence