Offer summary

Qualifications:

Bachelor's degree in Cyber Security or related field., Certifications such as GSEC, GCIH, GCFE, GCFA, GNFA, GREM, and CREST certifications are preferred., Strong understanding of ITIL processes and incident management., Experience in malware analysis and network intrusion analysis..

Key responsabilities:

Respond to cyber incidents and conduct detailed intrusion analysis.

Proactively hunt for adversaries in customer networks and perform digital forensics.

Evaluate and recommend tools and technology for incident response.

Communicate effectively with clients and escalate issues to upper management when necessary.

Job description

Title: Senior Cyber Incident Response Analyst

Location: Cape Town or Johannesburg, South Africa

Salary: Negotiable / DOE

About Us

Integrity360 is one of Europe’s leading cyber security specialists operating from office locations spread out across Europe, providing a comprehensive range of professional, support and managed cyber security services for our 300+ clients. With four top-class Security Operation Centers, we offer a complete end-to-end security services covering our clients’ security from every angle. Our services include Managed Security, Cyber Security Testing, Incident Response, Security Integration, PCI Compliance and Cyber Risk & Assurance services.

What sets Integrity360 apart is our excellent team of people that drive the business forward. The company was founded with a focus on technical expertise and that philosophy remains today. The skills and experience in our company are some of the greatest in the industry and clients remain with Integrity360 because they can rely on and trust us to go above and beyond to ensure their needs are met. Listed multiple times on Gartner Market Guides for Managed Security Services.

Job Role / Responsibilities

The Senior Cyber Incident Response Analyst will work within established methodologies to perform a variety of Incident Response related activities for new and existing customers, to include responding to cyber incidents, proactively hunting for adversaries in customer networks, conducting detailed Intrusion analysis – host and network, malware reverse engineering, Digital forensics and Cyber Threat Intelligence services.

Proactive client services, such as compromise assessments and evaluating and recommending tools and technology for incident response are also in scope. Demonstration of a strong comprehension of malware, emerging threats and adversary TTPs will be critical to success.

Desired Skills

Customer focus - have the ability to work directly with customers and demonstrate services delivered to customers in a face to face setting when required.
You will have the capacity to multitask on several technical and operational issues simultaneously. Have a very good understanding of customer issues and you are able to empathize with customers as to their current situation.
Ability to think through difficult issues and provide advice or when necessary
A clear understanding of the ITIL processes
Ability to work on assignments requiring sound judgement in resolving issues or in making recommendations;
Initiative to drive all incidents to resolution, ensuring timely participation by all stakeholders;
Without hesitation when required, escalate issues to upper management, to include C-Level managers, in accordance with prescribed procedures.
Incident Management and Incident communication experience
Experienced in meeting deadlines while following processes and procedures
Capable of working with other teams that challenge your processes and procedures
Understanding of ITIL, SANS, PCI DSS, ISO 27001 and ISO20000
Logical thought mindset and experience developing reusable processes / data architectures.

Technical Knowledge Requirements

Host Intrusion Analysis
- Windows (Endpoint and Server)
- Unix
Network Intrusion Analysis
Familiarity with categories of Malware and Malware Reverse Engineering techniques
Experience working with security tools for the purposes of detection, diagnosis, containment and remediation
Extensive knowledge of Windows server systems.
Experienced in creating and maintaining a security incident response plan (IRP).

Certifications/Qualifications

SANS: Qualifications in Security Essentials (GSEC), Hacker Techniques & Incident Handling (GCIH), Host (GCFE/GCFA) & Network (GNFA) Forensics, Malware Analysis (GREM) and any Digital Forensics specializations.
CREST certifications: Certified Incident Manager, Certified Host Intrusion Analyst, Certified Network Intrusion Analyst, Certified Malware Reverse Engineer, Practitioner Intrusion Analyst, Registered Intrusion Analyst
Certified Ethical Hacker
A strong team player with a flexible approach
Can demonstrate consistency in work attitude