Cyber Defence Manager L1

Basic Qualifications:

• 10+ years of relevant cybersecurity experience with expertise in cyber threat hunting, threat intelligence, SOC, and data analysis.
• Strong knowledge of EDR/XDR, next-gen SIEM platforms, and threat intelligence tools (both OSINT commercial solutions).

Skillset Required:

• Experience in leading threat hunting and threat intel teams.
• Broad understanding of various security technologies including EDR/XDR, SIEM, Proxy, Email exchange, network, Cloud, etc.
• Monitor and analyse threat intelligence feeds, security alerts, and indicators of compromise (IoCs) from multiple sources.
• Exposure to log analysis using various security tools and operating system logs.
• Experience with MITRE ATTCK Framework, Cyber Kill Chain, and NIST Cyber Security Framework.
• Ability to research and prioritize emerging and significant risks, and take actions including formal threat advisory releases and threat hunting.
• Research and gather intel on vulnerabilities, threats, attacks, and compromises.
• Capable of conducting in-depth research on cyber threat actors, their tactics, techniques, and procedures (TTPs).
• Provide assistance to other cybersecurity teams and recommend mitigation measures.

Job Responsibilities:

• Research the latest threats, articles, and publications to gather threat intel and identify potential risks.
• Create hypotheses and conduct threat hunting, leveraging various log sources and tools to verify prerequisites.
• Identify actionable intel and take mitigative actions to protect brand reputation.
• Release regular threat advisories for emerging cyber threats, vulnerabilities, and attack campaigns.
• Work closely with other security teams as required.
• Build, maintain, and share reports and dashboards.