Lead Operational Engineer

Job Responsibilities

1. Manage critical incidents and challenges and be the focal point of contact for major incidents. Coordinate with other departments during critical incidents and drive post-incident reviews and formulate preventive strategies.
2. Detect, identify, and report possible cyber-attacks, intrusions, anomalous and misuse activities.
3. Evaluate incident triage activities to ensure optimum incident resolution including the ownership of escalated incidents.
4. Analyse network traffic and system data to detect potential threats to resources and provide recommendations for remediation. Conduct analysis that encompasses defining the scope, urgency, and potential impact.
5. Perform correlation of security incidents and events to build threat detection and prevention capabilities baseline network traffic and host activity across the enterprise.
6. Manage and document the incident throughout its cycle, including tracking and documenting incidents from initial detection through final resolution and update the knowledge bases, preventative controls, and standard operating procedures.
7. Execute incident trend analysis, report and assess the impact on data and infrastructure as a result of cyber incidents.
8. Lead security operations, respond to feedback from internal IT departments, business and audit operational performance against the defined metrics and goals.
9. Collaborate with intelligence analysts to correlate threat assessment data and recommend methods to enhance defense capabilities.
10. Liaise with the content Engineering Team to identify and implement automation and service improvement programs to manage security operations efficiently.