Source description
About the role
As a Security Incident Responder, you will be primarily accountable for the following key responsibilities: - Handling Security Incidents assigned by the Security Incident Service Manager. - Ensuring that incidents are handled according to agreed procedures. Investigates escalated incidents and seeks resolution. Facilitates recovery, following resolution of incidents. - Ensuring that resolved incidents are properly documented and closed. - Analyzing causes of incidents, and informing service owners to minimize the probability of recurrence and contribute to service improvement. - Analyzing metrics and reporting on the performance of the incident management process. - Working with service providers to ensure the proper implementation of the Security Incident Process and Policies. - Collaborating closely with the Security Incident Service Manager to identify areas of improvement for the Security Incident Process and Policies. - Collaborating with countries, businesses, and regions to identify key resources that can assist in the Security Incident process and incident handling. - Defining standard methods and processes for incident resolution, delegating them to the back-office, and overseeing the work of the back-office. - Being involved in the installation, management, maintenance, and optimization of IS security solutions/services. Qualifications for the role include: - 10 years in IT, with at least 5 years in Security incident response. - Graduate level with an IT focus or equivalent practical experience. - Security Certification (CISSP, CISM, GSEC, or others). - Experience in AntiVirus Technology and AV Tools. - Experience in EDR Technology and EDR Tools. - Experience in log analysis of Firewalls, Proxy servers, Operation Systems, Databases, preferably via SIEM Servers/clients, mobile devices, appliances, OSs, common applications, and databases with in-depth knowledge. As a Security Incident Responder, you will be primarily accountable for the following key responsibilities: - Handling Security Incidents assigned by the Security Incident Service Manager. - Ensuring that incidents are handled according to agreed procedures. Investigates escalated incidents and seeks resolution. Facilitates recovery, following resolution of incidents. - Ensuring that resolved incidents are properly documented and closed. - Analyzing causes of incidents, and informing service owners to minimize the probability of recurrence and contribute to service improvement. - Analyzing metrics and reporting on the performance of the incident management process. - Working with service providers to ensure the proper implementation of the Security Incident Process and Policies. - Collaborating closely with the Security Incident Service Manager to identify areas of improvement for the Security Incident Process and Policies. - Collaborating with countries, businesses, and regions to identify key resources that can assist in the Security Incident process and incident handling. - Defining standard methods and processes for incident resolution, delegating them to the back-office, and overseeing the work of the back-office. - Being involved in the installation, management, maintenance, and optimization of IS security solutions/services. Qualifications for the role include: - 10 years in IT, with at least 5 years in Security incident response. - Graduate level with an IT focus or equivalent practical experience. - Security Certification (CISSP, CISM, GSEC, or others). - Experience in AntiVirus Technology and AV Tools. - Experience in EDR Technology and EDR Tools. - Experience in log analysis of Firewalls, Proxy servers, Operation Systems, Databases, preferably via SIEM Servers/clients, mobile devices, appliances, OSs, common applications, and databases with in-depth knowledge.
More at ABB
Related open roles
- UAM Process Solution and Data Architect
Bangalore
SoD Ruleset Specialist
Bangalore
Senior SoD Specialist – S/4HANA & Fiori Authorization
Bangalore
Associate R&D Engineer_Cyber Security (Karnataka)
India
Principal Domain Architect - Identity and Access Security
Bangalore
- UAM Process Solution and Data Architect
Bangalore