TotalCyber.io
Cyber Security jobs across the world
Copyright 2024 All Rights Reserved by YipCraft
We will contibute 1% of your purchase to remove CO2 from the atmosphere.
Cyber Security Incident Response Expert
PwCPragueBrno
Onsite
Full-time
Job Description & Summary
About the Team
For us, SOC is not just logging or monitoring but it is acomprehensive threat management tool of which logging is only one component. Our understanding of SOC includes Monitoring and Incident Detection, Investigating Incidents and their remediation and also support services such as Vulnerability Management and Threat Intelligence, technologically and from the perspective of terms of all related processes.
We deliver service toclient which consists of analysis of events in Security Information and Event Management (SIEM) system and response tosecurity incidents and we provide additional expertise (Vulnerability management, … ) when demanded.
About your manager
Marek is Head of Cyber Operations with over 8 years of experience with cyber security and consulting, building relationships across various teams on local and international level. His experience is coming from multiple international corporations where we are running SOCs, doing SOC transformations, assessments and incident response activities. He considers himself as aself-driven person with ahigh focus on technical capability and building opportunities based on trust with all stakeholders. He is focused on finding the evil in the enterprise networks and automation. In his free time he likes travelling, spending time with friends, good food and watching movies.
Job description & summary
We look for the passionate and curious individual, who wants to grow his/her cyber security professional career in the field of detecting potential security incidents, analyzing data in search of evidence, respond to breaches and hunt for adversaries.
Incident Response Expert will represent the team within the client's operations as Level 3 analyst and Subject Matter Expert (SME) when it comes to security incident detection, analysis and investigation and will drive the consequent incident response towards successful containment & eradication. Within the role can be expected balanced ratio of long term client engagement in the operations mode with the ad-hoc project based engagements focused on pure incident response, threat hunting & breach discovery.
This is a senior role and its additional responsibilities may include continuous improvement of the Threat Management team tradecraft and capabilities as well as sharing knowledge, mentoring and training junior colleagues.
With clients coming from the Czech Republic, Central & Eastern Europe as well as from the wider EMEA region, you will have the opportunity to grow your technical expertise or consulting skills (or both) of a lifetime.
Requirements of the role
4+ years of relevant professional experience.
Consistent, reliable and professional personality, capable of working within international & diverse teams.
Previous SIEM/SOC/CERT/CSIRT/DFIR (or equivalent) experience highly desired.
In depth understanding of varied attack vectors and adversaries’ Tactics, Techniques & Procedures (TTPs) up to the level of Advanced Persistent Threats (APTs).
Excellent understanding of one or more Operating Systems (Linux, Windows, …).
Ability to work under pressure during major security incident response situations as well as attention to detail during post-breach investigation.
As an Incident Response Expert, you will lead technical investigations and recovery efforts in response to cybersecurity incidents, conducting forensics, and identifying compromised systems. Previous experience in incident response is essential.
Ability to lead investigations in compromised environment without any previous knowledge of the environment for major incidents (eg. ransomware, APTs).
Nice to have
Hands-on skills within the information security field, with special focus towards Security.
Information and Event Management (SIEM) tools like Splunk, QRadar, Arcsight or ELK.
Working knowledge of the Endpoint Detection & Response (EDR) tools.
Experience with Cyber Threat Intelligence integration into SOC environment & operation.
Previous consulting experience in the global enterprise environment.
Deeper experience in any (or more) of the following areas:
- Security/Network Analysis
- Incident Response
- Cyber Threat Intelligence
- Threat and Vulnerability Management
- Digital Forensics
- SIEM implementationIndustry recognized certifications either in the area of general information security or focused.
Towards Threat Management can be plus.
Our Benefits and Fun
Concentrated experience and rapid career growth. It may sound like aplatitude, but it really is.
Paid time off 20 + 5 days, 3 wellbeing days and 2 extra days off from the company at the end of the year.
High-end Ultrabook and iPhone with unlimited data.
Flexible working hours.
Work from our offices in Prague, Brno, or Ostrava, or choose to work from home if that is your preferred option.
Benefit program with 45.000 points that you can use for holidays, education, food vouchers, sports (Multisport), health... Simply on what you enjoy.
Support for your education and development: business and digital trainings, technical certifications (e.g. SANS) or whatever that makes sense and it's related toyour job etc..
Possibility of Secondments - opportunity towork at aforeign PwC office in the future - for example in the USA, Canada etc..
Extra-work activities and Away Days (team building, ski weekend, etc..)
Regular feedback on your work, also consultation with acoach with whom you can address your further development and career direction.
PwC is the largest audit team in the Czech Republic, law, tax, consulting and technology, data or forensic teams. Find out how easy it is to combine this knowledge when you're in the right place. With us, you will get the opportunity to see how business is done in large companies. We are part of an international network of companies with more than 364,000 colleagues in 151 countries. At PwC, we create an inclusive work environment where everyone can be themselves and find their place and opportunity to develop.
Are you interested in our offer? Let us know about yourself and we will discuss more details together!
Ochrana osobních údajů pro žadatele o zaměstnání/Privacy Statement for Recruitment Applicants
#LI-EK1
Cyber Security Incident Response Expert
Location
PragueBrno
Workplace
Onsite
Type
Full-time
