Leads a global team to apply security incident handling processes for CSL to successfully support the cybersecurity and information security incident response process to:
from cybersecurity events
The role will lead a global team of digital forensics, incident response and eDiscovery analysts that will:
•
Work closely with the Director, Security Operations to develop and implement a cybersecurity threat analysis structure of common attack techniques to evaluate an attacker’s spread through a CSL system, platform and or network.
•
Develop and maintain a continuous upskilling program for your team to increase skills and overall capability maturity
•
Identify and implement tools to determine attack types and choose appropriate defenses and response tactics for each
•
Derive Indicators of Compromise (IOCs) from malicious activity to strengthen incident response, threat detection, and intelligence efforts
•
Conduct in-depth forensic analysis of various operating systems
•
Examine traffic using common network protocols to identify patterns of activity or specific actions that warrant further investigation
•
Detect and hunt for adversary tools, tactics, and procedures (TTPs) across an enterprise environment
•
Partner with Compliance, Legal, Privacy, and other teams to perform internal investigations pertaining to eDiscovery matters
Demonstrates thought leader-level abilities with, and/or a proven record of success directing efforts in the following areas: Network Analysis Computer Memory Analysis Endpoint Analysis Cyber Incident Lifecycle NIST 800-61 Lead and supervise teams to create an atmosphere of trust and seek diverse views to encourage improvement and innovation, answer questions and provide direction to less-experienced staff, coach staff including providing timely meaningful written and verbal feedback
Reports to Executive Director, Enterprise Monitoring & Cyber Resilience
Direct Reports – This role will manage a team of Forensics, eDiscovery, Incident Response and Threat Hunting SME’s and may have Project Managers, Project Coordinators, Security Architects, and vendors or managed service providers as direct and indirect reports based on security project portfolio.
Main Responsibilities and Accountabilities:
Participates in the hiring, growth, and development of junior incident response staff in the areas of threat hunting, forensic analysis, eDiscovery, litigation hold, incident resolution and return to operations. Mentors and directs specially assigned incident response project managers and their teams and program management staff, and actively role models expected project management and leadership behaviors and processes designed to improve project results and the performance of the team.