Incident Response Engineer (blue team) (cybersecurity)

SUMMARY:
this is an opportunity to build your career within cybersecurity

POSITION INFO:

INCIDENT RESPONSE ENGINEER x3

(jnr & intermediate roles)

The team is growing at a rapid rate and we are looking to add some more awesome team players!

The candidate will be working with the MDR (Managed Detection and Response) team to respond to and investigate malicious activity, triage incidents and assist customers with responding to security incidents.

We will consider candidates with no security experience but would like to find someone who is passionate about cyber security.
Any cyber security experience would be an advantage, but the likely candidate will have the following background and experience (in the absence of security experience).

á´¥ Systems Engineer with some networking experience
á´¥ This role requires communication with clients so will require great written (email) communication skills, often some experience in desktop support aids this.

What you will be doing:
• Investigate incidents to determine if they are false positives or if they require in depth investigation.
• Investigate cases to closure. Where required escalate or liaise with team members to assist in determining outcome. Communication to clients is key to ensure that cases can be closed with success.
• Work with detection team to devise new methods of detecting malicious activity.
• Review, document and refine response procedure for alerts to ensure it is as effective as possible.
• Develop, analyse and report on alerts and their effectiveness. Work with detection teams to fine tune detectors to make them less likely to create false positives.
• Work with detection and infrastructure teams to optimise response workflow through automation, orchestration or using other innovative methods.

The successful candidate will meet most of these criteria:
• Have a passion for cyber security
• Have troubleshooting skills and experience, both on network and application levels
• Be attentive to details
• Have the ability to communicate clearly and effectively, particularly via email
• Willingness to work in a team environment to improve efficiencies and solve problems as a team
• Have a broad understanding of IT systems in general. Any specialisations will be beneficial but a shallow but broad understanding is imperative

In terms of qualifications, any general IT qualifications will be of benefit. Any security certification or vendor specific certifications, particularly for cyber security products will also be beneficial.

To apply for this vacancy, please send your CV and Cover Letter to --------Please upload your CV here--------

NB! This job is now closed. You can apply for other jobs by uploading your CV.