Cybersecurity Defense Specialist

Key Responsibilities

• Correlate incident data to identify vulnerabilities and report cyber incidents and trends to inform cyber defence.
• Track and document cyber incidents from initial detection to final resolution.
• Analyse log files from multiple sources to identify possible threats to network security.
• Triage incidents to identify specific vulnerability, determine scope, urgency and potential impact.
• Perform initial collection of images to relevant forensic standards; inspect to evaluate possible mitigation and remediation measures.
• Perform incident response tasks to support deployable incident response teams including forensic collection, intrusion correlation, tracking, threat analysis and system remediation.
• Analyse network alerts from multiple sources to determine possible causes.
• Write and publish cyber defence techniques, guidance, and post incident reports to appropriate constituencies.
• Employ defence-in-depth principles and practices in line with organizational policies.
• Collect intrusion artefacts and use discovered data to mitigate potential cybersecurity incidents within the organization.
• Write and publish reviews to learn and promulgate lessons from cybersecurity events.
• Monitor external data sources to keep understanding of currency of cybersecurity threats up to date and determine which security issues may have an impact on the organization.
• Coordinate incident response functions.
• Coordinate with threat intelligence analysts to correlate threat assessment data.
• Identify and select most effective sources of information to assist with incident investigation.
• Provide expert technical support to resolve cyber defence incidents.
• Support law enforcement, explaining incident details and forensic analysis as required.
• Identify information gaps in threat intelligence and assess their implications for the organization.
• Monitor and report on validated threat activities.