Brief Description
Investigate, analyze and respond to information security incidents occurring on the Organization's IT infrastructure.
Qualifications
Training Specialization
Certificates
Scope of Work Responsibilities
Review and collect data related to information security incidents
- Hunt across the entire system, identify compromised components according to TTPs (Technique, Tactic & Procedure) of the attack group
Analyze and Handle Information Security Incidents
- Correlate incident data to identify specific vulnerabilities, weaknesses and provide recommendations to enable quick and thorough remediation
- Conduct in-depth analysis of the tools and methods used by hackers in the attack (malware, webshell, hacktool, ...)
- Monitor and record incident logs from detection to completion of handling.
Requirements
- Knowledge of incident response and handling methods
- Knowledge of intrusion detection methods and techniques to detect intrusion attacks based on server layer and network layer
- Knowledge of concepts and methods of malware analysis
- Knowledge of cyber attack phases (for example: reconnaissance, scanning, enumeration, gaining access, escalation of privileges, maintaining access, covering tracks)
- Knowledge of threats, security vulnerabilities of systems & applications (For example: Buffer overflow, malware, XSS, SQLi, injection, hijacking, …)
- Knowledge of application security risks (for example: top 10 OWASP)
- Skills in identifying, classifying types of vulnerabilities & related attacks
- Skills in using security event correlation tools.