Lead Engineer - Cybersecurity Incident Response (Cluster CISO Office)
The role supports cyber incident management for one of our Clusters across all institutions, cybersecurity tabletop exercises, oversight of SOC, etc.
Role & Responsibilities
- Develop Cyber Incident Response Readiness - Get prepared before it happens
- Develop Incident Response Plan that integrate into ERM incident response
- Work with various stakeholders including Synapxe, GCIO office, Institution ISO, Public Relations, etc. to ensure cyberattack preparedness
- Test Cyber Incident Response Readiness - Test to ensure we are ready
- Coordinate table top exercise with Cluster management
- Participate in government lead cyberattack exercise such as CSA Exercise Cyber Star
- Support Incident Response - Support response when it happens
- Assess & classify security incident. Initiate response actions
- Notify cluster management
- Contain and eradicate the incident
- Recovery post incident
- Investigate the incident
- Review alerts from MSSP
Requirements
At least 6-8 years of cybersecurity incident response experience is requiredA strong communicator with good writing and communication skillAble to work under pressure and work with multiple parties needed to manage the cybersecurity incidentCybersecurity incident response related certifications such as GCIH, GCFA, GRID, GCIA is a requirement#J-18808-Ljbffr