Sr. Consultant, Core Cyber Ops

Job Purpose andImpact

The Senior Consultant, Core CyberOperations – SOC job enhances our security operations by supportingorganization-wide cybersecurity threat detection and responseprocesses. The ideal candidate will have a background in incidentresponse, cybersecurity, and/or security operations. This job ispart of the team responsible for identifying, analyzing, andmitigating cyber threats, ensuring a robust security posture, andfacilitating compliance with legal and regulatory requirements.With minimal supervision, this job supports the followingfunctions:

KeyAccountabilities

• INCIDENT RESPONSE: Leadresponse to a wide range of cybersecurity incidents. Conduct deeperinvestigations, confirm incidents, and lead containment effortsbased on escalations from SOC analysts. Follow establishedprotocols and document findings.
• SECURITY MONITORING: Design, implement, and manage solutions toenhance incident response processes. Continuouslymonitor security alerts and events using SIEM tools to identifypotential threats. Analyze logs and network traffic to detectanomalies and suspicious activities.
• LOG ANALYSIS: Performdetailed analysis of logs from various sources (e.g., EDR,firewalls, IDS/IPS, servers) to identify and investigate securityincidents.
• THREAT INTELLIGENCE: Utilize threat intelligencefeeds to stay informed about emerging threats. Apply this knowledgeto enhance detection capabilities and improve responsestrategies.
• DOCUMENTATION: Document security incidentsthoroughly, including steps taken and outcomes. Create and maintainprocess documentation to ensure consistent and efficient securityoperations.
• INCIDENT RESPONSE: Leads and guides incidentdetection, response, and recovery processes to ensure effective andefficient management of cyber incidents.
• CYBER SERVICESVISIBILITY: Oversees the design and operation to assure situationalvisibility for all cyber services, including foundational cyberanalytics and automation.
• THIRD PARTY COMPROMISE: Fosterspartnerships on third party compromise response activities toaddress and mitigate risks associated with externalentities.

Qualifications

• Minimum requirement of6 years of relevant work experience. Typically reflects 8 years ormore of relevant experience.
• Strong knowledge of cybersecurityprinciples, threat detection, and incident response.
• Provenexperience in IR (Incident Response).

#HiPo

…