Must have technical/professional qualifications:
4 years or above related experience-
Excellent verbal and written communication skills
-
Highly disciplined and motivated, able to work independently, under direction, or as a member of a team
-
Deep understanding of threat actor techniques and tools
Core competencies, knowledge, and experience: "Required"
Strong communication skills and experience with working with stakeholders across a large enterprise-
Strong analytical skills around identifying modern offensive techniques
-
Experience investigating computer network intrusions in an enterprise
-
Experience with SIEM technologies, to find and identify suspect events in large telemetry sets
-
Experience with investigating intrusions in Linux and cloud environments
-
Knowledge of network infrastructure, including routers, switches, and firewalls.
-
Strong technical knowledge of mainstream operating systems and a wide range of security technologies from network sensors to endpoint protection suites.
Demonstrable experience in critical thinking and data or logical analysis.
Knowledge of;
-
Typical security devices such as firewalls, Intrusion detection systems, anti-virus, anti-spam,
-
Cyber threat concepts e.g. cyber kill chain, attack methods, threat actors.
-
Cloud systems and Windows and Linux OS.