Description and Requirements

Key Responsibilities:

1. Incident Response & Security Monitoring
• Work closely with SIRO/SIRM, IT Security Officer (ITSO) and SOC to monitor, detect, and respond to threats on-premises and on cloud.
• Lead Security Incident Response (IR) and post-mortem analyses for cybersecurity incidents arising from security threat events.
• Stay current with emerging threats, vulnerabilities, and threat intelligence related to cloud platforms.
• Disseminate security advisories, threat intelligence reports, security directives, and patch recommendations promptly to the relevant stakeholders in the agencies.
• Partake in tabletop exercises, security risk management activities, audits and third-party assessments to enhance incident response readiness.

2. Security Product Management
• Monitor security events on SIEM Splunk, Cortex, Exa beam), perform event triage and analysis. 
•...