Information Security Specialist

Role Description

The Global Threat Detection & Response (TDR) team operates 24x7x365 in a follow-the-sun model with distributed teams across 3 regions (APAC, EMEA and AMER). The team is responsible for enabling the business of Deutsche Bank by providing agile, cost-effective and cutting edge threat response services to protect Deutsche Banks data, assets, customers and partners.

This Threat Response (TR) Analyst role is part of the APAC TDR team, and requires a heavy focus on all areas of security monitoring, threat assessment and incident response, requiring a minimum 5 years of cyber experience.

Your key responsibilities

• Responsible for monitoring and investigating alerts and events escalated from SIEM or other security channels. This role involves conducting in-depth log analysis, correlating IOCs, and implementing threat containment measures when necessary.
• Mitigate security risks and threats relating to cloud-based systems, applications, and data. This includes working closely with cross-functional teams to enhance our cloud security posture.
• The incumbent also assumes responsibility for overseeing and coordinating all facets of incident management like initial evaluation, stakeholder management, technical triage, and incident resolution. Proactively search and identify patterns of compromise, emerging threats, evidence of breach and anomalies by analysing historical data.
• Perform cyber risk assessment, and evaluate existing detections and controls to mitigate identified risks. The overarching goal is to enhance efficacy and proactively detect adversaries and malicious activities.
• Responsible for leading and coordinating operations and processes that are necessary for the smooth management of the security operations center Involved in managing various projects like detection use cases, security automation (SOAR), and threat hunting.

Your skills and experience

• Minimum 5 years cyber security working experience in security operations, incident response, threat assessment etc, with at least 2 years working in an enterprise-grade security operations center (SOC).
• Working experience in network protocols, monitoring of logs and analysis, XDR, cloud infrastructure, and security controls in investigation and threats containment.
• Working experience investigating cloud security alerts and understanding of cloud infrastructure and operations
• Working experience in security tools such as SIEM, SOAR, XDR, and Cloud-based IR tools.
• Experience in blue/red/purple team techniques, adversary tactics, techniques, and procedures (TTPs), and cyber kill-chain.
• Possesses minimum a Bachelors degree in either Computer Science, Information Technology, or Science (Computer Studies).
• Analytical and critical thinking with an inquisitive mindset, collaboration, and conflict management with good communication skills.