Lead Engineer - Cybersecurity Incident Response (Cluster CISO Office)
The role supports cyber incident management for one of our Clusters across all institutions, cybersecurity tabletop exercises, oversight of SOC, etc.
Role & Responsibilities
Develop Cyber Incident Response Readiness - Get prepared before it happens
Develop Incident Response Plan that integrate into ERM incident response
Work with various stakeholders including Synapxe, GCIO office, Institution ISO, Public Relations, etc. to ensure cyberattack preparedness
Test Cyber Incident Response Readiness - Test to ensure we are ready
Coordinate table top exercise with Cluster management
Participate in government lead cyberattack exercise such as CSA Exercise Cyber Star
Support Incident Response - Support response when it happens
Assess & classify security incident.
Initiate response actions
Notify cluster management
Contain and eradicate the incident
Recovery post incident
Investigate the incident
Review alerts from MSSP
Requirements
At least 6-8 years of cybersecurity incident response experience is required
A strong communicator with good writing and communication skill
Able to work under pressure and work with multiple parties needed to manage the cybersecurity incident
Cybersecurity incident response related certifications such as GCIH, GCFA, GRID, GCIA is a requirement
#J-
Lead Engineer • Queenstown, New Zealand