Senior Incident Handler, Cyber Security

             Security Operations Monitoring:

1. Manage the investigation of alerts raised to identify a security incident. Close false positive alerts after triage. 

2. Analyzing security events to identify threats and recommend actions

3. Manage the implementation of security controls and incident response processes

4. Contributing to team training and knowledge-sharing

5. Lead in 24/7 security operations and responding to incidents

6. Document a daily update for all alerts investigated and their outcome. The update should be provided to the Head of Cyber 7PM.

7. Document triage report for all alerts that have been investigated

8. Lead the identification, prioritization, and implementation of use cases

9. Work with other departments to ensure logs for all servers and network devices are integrated with the SIEM

10. Manage operational relationships with third-party SOC providers 

11. Ensure SLAs are met for identifying and investigating an alert

Threat Hunting:

1. Support threat hunting lead to conduct threat hunts based on iOS received from various sources

2. Review ad produce threat hunting reports with recommendations

3. Oversee the continuous improvement to the current threat hunting procedure 

Security Investigations and Incident Response:

1. Support the cyber team to investigate a cyber breach this will include

2. Investigating via EDR platform

3. Log analysis 

4. Forensically imaging systems identified as being compromised

5. Analyzing any data collected

6. Provide recommendations on gaps identified during an investigation

7. Ensure chain of custody is maintained throughout an investigation

8. Ensure the incident management plan is followed through the lifecycle of an incident response

9. Review, approve, and present investigation findings and post-incident reports to management and relevant stakeholders.