Cyber Incident & Threat Team/Shift Lead Professional

Role

Your team will provide visibility and control of information risks for the client. It will support the 24x7x365 nature of the clients business, providing a threat detection and response capability for digital services before, during and after cyber attacks, enabling stakeholders to understand and proactively manage risk across the technology estate. 

• Identification of critical services where loss would negatively impact operations.
• Awareness of the cyber risks to critical services by continually assessing the threat landscape and informing stakeholders.
• Detecting when, where and how attacks take place.
• Reporting cyber risks to service, executive and operational stakeholders for mitigation decisions.
• Analysing attacks and providing forensic of malware and artefacts to identify solutions to mitigate cyber threats
• Limiting the impact of known cyber risks by engaging in pre-incident planning and preparatory activities.
• Constraining attack surfaces through proactive penetration testing, vulnerability management, and threat hunting.
• Managing incident response, containing the attack and supporting restoration of normal operations.

• As a leader of a Cyber Incident and Threat Response team you will coach and support the team in responding to immediate security threats that may impact the client network
• Responsible for the next level of escalation for technical incident response. 
• You will be responsible for responding to both incident and intelligence alerts regarding the cyber risks facing the client
• The team’s goal is to detect, analyse, investigate and respond to cybersecurity incidents using a combination of cutting edge technology and a strong set of processes.

• Ability to lead a team responsible for first line response on all reactive Cyber related activity
• Knowledge of various security methodologies and processes 
• Leadership and coaching skills
• Incident Management skills
• Strong working knowledge of offensive security including attack methods and techniques.  
• Knowledge of protocols, tools and methods to acquire and manage technical threat intelligence data.   
• Experience in managing and leading a team of people, providing coaching for continuous improvement
• Excellent ability to translate complex issues to the relevant audience, both verbally and written.   
• Excellent interpersonal skills and professional demeanour.

• Experience working in a fast paced operational environment
• Experience leading a team of operational staff
• Foundation or Higher Degree in computer science or related subject, or relevant practical and transferable experience - PREFERRED
• Completed CompTIA Network+ and Security+ or willingness to work towards - PREFERRED
• Experience in internal and external stakeholder management and engagement – PREFERRED