Full-Time Cyber Incident Response Lead

As a member of Experian's Global Security Office (EGSO) / Cyber Fusion Center (CFC), you will respond, contain, escalate, investigate, and coordinate mitigation of security events related to anomalies detected and escalated by the Cyber Fusion Centre (CFC). This involves adhering to Experian's Incident Response Plan.

You will join a growing team of advanced responders supporting escalations of complex or prioritized matters from Experian's 24x7 security monitoring and response functions.

Your responsibilities include:

1. Conduct advanced incident response activities to investigate and contain complex cybersecurity matters.
2. Provide investigative support to other teams, such as Forensics and Cyber Threat Hunt.
3. Respond to security events and alerts.
4. Manage multiple security incidents throughout the incident response lifecycle (Analysis, Containment, Eradication, Recovery, Lessons Learned).
5. Maintain detailed case documentation.
6. Understand common operating systems (Windows, Linux, Mac OS), security technologies, and networking.
7. Interpret logs from various sources (firewalls, proxies, web servers) to identify causes and determine next steps.
8. Provide advanced support to analysts and mentor other analysts.
9. Maintain knowledge of network protocols, standard protocols, wireless networking, networking infrastructure, and network technologies.
10. Utilize commercial and open-source SIEMs, packet capture tools, and network analysis tools (Splunk, Wireshark).
11. Demonstrate knowledge of intrusion methods, and cyber-attack tactics, techniques, and procedures (TTPs).
12. Utilize incident response and security monitoring applications (e.g., SIEM, EDR).

What is the last date for applying to the job?

Which countries are accepted for this remote job?