Job Description Role Purpose
The purpose of this role is to analyze attack patterns, develop incident response plans, ensure audit readiness, and implement disaster recovery measures, to ensure adherence to cyber security regulatory frameworks.
͏ Areas of responsibility
Monitoring and Incident Detection-Analyse attack trends and correlate logs across systems to identify advance threats. Enhance monitoring processes and implement improvements for faster detection, to ensure compliance with security frameworks and regulatory standards.
Incident Handling and Analysis-Perform root cause analysis, create incident response plans and implement disaster recovery measures to minimize business disruption
Threat Assessment and Analytics-Undertake forensic analysis using advanced analytics tools and implement mitigation measures to align with compliance requirements.
Stakeholder Coordination and Audit Assistance-"Liaise with cross functional teams, external vendors and auditors to ensure compliance with security frameworks.
Maintain audit documentation and ensure its accuracy while implementing processes that support audit readiness and continuous compliance."
Training and Awareness-Assist in creating and delivering cybersecurity awareness sessions, including guidance on phishing and malicious emails.
͏ ͏ ͏ JD- SOAR Admin
• Migrate Rapid7 automation workflows.
• Rebuild playbooks in CrowdStrike SOAR.
• Configure ServiceNow and EDR integrations.
• Validate automated containment workflows.
• Troubleshoot API/authentication issues.
• Monitor automation performance after go-live.
• Create and maintain SOAR playbooks
• Integrate CrowdStrike with ServiceNow, Entra ID, Email Security, EDR, etc.
• Automate enrichment and containment workflows
• Manage API connections and credentials
• Troubleshoot failed automations
• Maintain RBAC and platform health
• Optimize workflows to reduce analyst workload
Mandatory Skills: Security Information Event Management
.