国际银行-安全响应工程师 (contractor)

1. Cybersecurity Operations:
Perform daily real time monitoring review and analysis of cybersecurity alerts/signals from multiple sources.
Triage security incidents including social engineering attacks, malware, hacking, unauthorized access, data breach, business email compromise etc.
Ensure incident documentation and handling is completed accurately within the case management system.
Refine current use cases implemented on the security stack to reduce/minimize false positives.
Create and maintain corresponding cybersecurity incident handling books
Support the improvement of related cybersecurity operations technologies
2. Digital Forensics and Incident Response:
Act as a first point of contact for cybersecurity incidents escalated by the Managed Security Services vendor and take responsibility end-to-end for incident investigation and response activities
Conduct forensic analysis to determine cause and extent of breach (where applicable)
Work together with various IT and business stakeholders to restore business operations with minimal impact efficiently.
Recommend remediation/recovery plans
Prepare timely, detailed and accurate incident report update
3. Reporting:
Participating in the development, editing and reviewing various IT Security reports such as weekly and monthly security reports, business supporting reports, regular cybersecurity reports, threat alerts etc.
Provide post-incident reports for management and stakeholders encompassing easy to understand details on risk and impact, containment, remediation and threat actors etc.
4. Other agreed cybersecurity related assignment
Performs other duties and responsibilities as assigned or required.