Technology Consulting - DT Cyber Incident Response Manager

Desired skill set:

1. Experience in incident response, cybersecurity, or related roles.
2. Strong experience with SIEM tools (e.g., Splunk, QRadar, ELK Stack), EDR platforms (e.g., CrowdStrike, Carbon Black, SentinelOne), and IDS/IPS systems.
3. Proficient in incident detection, analysis, and response using a variety of tools and methodologies.
4. Experience with forensics tools like EnCase, FTK, Sleuth Kit, or similar for analyzing compromised systems and gathering evidence.
5. In-depth knowledge of common attack vectors, including but not limited to phishing, malware, ransomware, DDoS, SQL injection, and credential stuffing.
6. Familiarity with network traffic analysis, log analysis, and interpreting system logs to identify anomalous behavior.
7. Experience with common operating systems (e.g., Windows, Linux, macOS) and understanding of their security features and vulnerabilities.
8. Understanding of advanced persistent threats (APTs), cyber kill chain, and the tactics, techniques, and procedures (TTPs) used by adversaries.
9. Ability to work under pressure during high-severity incidents and handle sensitive information confidentially.
10. Strong written and verbal communication skills, with the ability to explain technical issues clearly to non-technical stakeholders.