Ihre Aufgaben
Responding to Incidents:
- Manage and review response activities to active incidents, document findings and, with our MSP partners, implement suitable remediation actions to drive incidents through to containment and/or remediation.
- Track problem records related to past incidents through to closure while providing information and guidance to problem management teams.
- Conduct computer and network investigation from start to finish using tools and resources.
- Provide expert technical advice and leadership based on detailed understanding of Threat Intelligence (TI) and applied use of TI within incident response and forensic investigations.
- Assist in development and update of processes, procedures, and documentation related to incident response activities.
- Assist in implementation of incident response processes and procedures for prompt containment to ensure continuity of business with internal teams and MSPs.
- Provide feedback to SIEM engineers on alerts to ensure proper tuning of SIEM use cases.
- Provide feedback to SIEM engineers on requirement for new use cases.
Managed Service Provider (MSP) and Vendor Management:
- Assist in leading, motivating, developing, and appraising external MSP and vendor teams that are contracted to provide incident response services to Olympus so that their individual and collective performance is of the required standard and meets the current and future needs of the business.
- Work with MSP partners on a daily bases to ensure close alignment to Olympus core values and full delivery of contracted services.
- Provide oversight of MSPs contracted to provide Security Operations services within the Olympus environment to include, but not limited to, review of SLA/KPI data to ensure accuracy and precision of MSP reported data, review of MSP submitted documentation to ensure alignment with Olympus Policies and Standards, and review of MSP submitted service deliverables.
Ihre Qualifikationen
- Bachelor’s degree in computer science, cybersecurity or related field, or equivalent experience.
- Preferred certification: CISSP, CISM, CEH, GCFA, GCIH.3-5 years of hands-on experience investigating, containing, and mitigating security incidents in enterprise environments.
- Proficiency with EDR, SIEM platforms (Splunk, QRadar, Sentinel), SOAR, IDS/IPS and Firewalls.
- Threat & Malware Analysis – Experience with malware investigation, threat intelligence, and MITRE ATT&CK framework.
- Business and technical acumen.
- Problem solving skills combined with critical and analytical thinking.
- #LI-HYBRID
- #MIDSENIORLEVEL
Ihre Vorteile
-Flexible working hours, remote work possible (up to 60%)
-30 days of holidays per year
-Modern office and an inspiring working environment
-Employee restaurant with live cooking and healthy food (subsidized)
-Public transport ticket (100 % subsidized) or free parking space
-Company sport groups and an inhouse company gym
-Employee Assistance Program to support your health, mental and emotional well-being
-A comprehensive company pension scheme
-Company medical officer and vaccination offers
-Childcare through our ‘Buttje&Deern’ partner
-Bike leasing