Developing a cybersecurity operations strategy and aligning it with cybersecurity strategies.
Supervising the tasks and responsibilities carried out by the cybersecurity operations team and evaluating performance.
Develop, build and implement cyber incident response plans and ensure effective response to cybersecurity incidents.
Managing escalation processes and following up on security incident reports.
Dealing with risk analysis and assessing threats and vulnerabilities in the digital structure.
Assisting in cybersecurity compliance and auditing processes.
Monitoring and responding to cybersecurity threats, analyzing data and information related to cybersecurity, and taking measures to detect intrusions and threats and respond to them quickly and effectively.
Conducting awareness and training on the best safe cyber practices.
Qualifications
Information on cyber attacks, security threats, and risk management.
Experience with various security systems such as Firewall, IPS, IDS, SIEM, SOAR, EDR.
The ability to build rules for security event systems (SIEM), intrusion detection systems, and other systems.
Knowledge of IP/TCP and data flow within the network.
Knowledge of programming languages.
Professionalism and ability to manage security incidents and threats.
Previous experience and knowledge as a SOC Analyst or in Threat Hunting.