RESPONSIBILITIES
- Detect security attacks, cyber-attacks and launch countermeasures to protect WAISL and client assets.
- Direct, guide, and oversee the activities of security incident
- Support and develop the WAISL’s capabilities in Cyber Incident Response Team (CIRT).
- Create and update documentation related to security incidents, security
- Provide 24×7 support in conjunction with other members respond to computer security incidents.
- Identify and drive both tactical and strategic solutions to contain
- Analyse threat deification information from various internal & external sources and the rapidly resolve resolution of any identified
- Analyse malware and system forensics to determine level of
- Analyse forensic evidence for security incidents and disciplinary or criminal
- Conduct network packet analysis using commercial and open-source
- Conduct and oversee security incident response activities (triage, root cause analysis, escalation, unifications, communication) and develop strategies to contain and eradicate the incident.
- Serve as a subject mater expert in the identification of cyber threat events and incident response.
- Develop and refine processes, procedures, and techniques used by the team to continually
improve security posture - Drive the adoption of security best practices in SDLC and software acquisition processes.
EDUCATIONAL QUALIFICATIONS
- A bachelor’s degree in computer science/IT/Electronics engineering, MCA or equivalent University degree.
- One or more of the following certifications is essential:
- EC-Council’s Certified Application Security Engineer (CASE)
- Certified Secure Software Lifecycle Professional (CSSLP)
- GIAC Certified Web Application Defender (GWEB)
EXPERIENCE
- Minimum of 8 years of experience in the IT security industry, preferably working in a a development environment.
- Intermediate to expert level expertise and documented technical proficiency in software & data product cybersecurity, data protection, privacy engineering or a combination of general cybersecurity experience and 5+ years of software product development and commercial platform engineering experience.
- Experience designing, building, and maintaining enterprise security infrastructure and tools.
- Experience in scripting languages (Bash, Python, Power Shell)
SKILLS
TECHNICAL SKILLS:
- Strong knowledge of security vulnerabilities, cyber-attacks techniques and countermeasures.
- Strong knowledge of NIST Cyber Security Framework, CIS Critical Security Controls, OWASP
- Strong understanding of system and application security.
- Good understanding of coding & Scripting languages
- Strong coding skills in languages such as Python, Golang, Java, Javascript, C, C++, SQL, Assembly, Powershell, Ruby, PHP and Shell Scripting2.
- CTF Pentest standards and methodologies
SOFT SKILLS:
- Ability to work under pressure in a fast-paced environment.
- Strong attention to detail with an analytical mind and outstanding problem-solving skills
- Great awareness of cybersecurity trends and hacking techniques.
- Should be able to think critically and creatively to identify and address security vulnerabilities.
- Strong problem-solving and analytical skills.
- Should be able to work well in a team and collaborate effectively with others, both in person and remotely.
- Strong presentation and influencing skills.
- Excellent communication and interpersonal skills.
- Must have the ability to work with minimal levels of supervision or oversight and adhere to security policies.
- Excellent proficiency in English.