Incident Response Analyst
- PLDT INC
- Makati City, Philippines
- PHP 800,000 – PHP 1,200,000
Education
• Educational Background Graduate of IT, or Engineering related course: ex: Computer Science, Computer Engineering, Physics, Mathematics, MIS, ECE, etc.
Qualifications
- Experience in system administration of Unix like Operating Systems and/or Windows as well as system services or daemons.
- Knowledgeable of TCPI/IP concepts and ability to analyze packet captures.
- Experience with various investigation tools (Volatility, Wireshark, etc).
- Experience with various network and system security controls (Firewalls, IPS, NAC, AntiDDOS).
- Deep knowledge of tools, techniques, and procedures of adversary (MITRE Framework, etc).
Duties and Responsibilities
- Respond to incidents by coordinating with internal and external departments to contain an incident. Timely update incident tickets and escalate accordingly.
- Advise and develop remediation plans.
- Work closely with the security engineering team to enhance detection and/or prevention capabilities.
- Produce incident reports.
- Produce post incident analysis, statistical information and dash boards.
- Monitor and Update containment and eradication efforts.
- Keep abreast with global security trends from social media and RSS feeds.
- Mentor/Supervise Cyber Response Analyst/s
- Ensure proper skills and capability are present among Cyber Response team.
- Provide inputs to proactive hunting team on areas that need further monitoring and surveillance.
- Provide inputs to Security Engineering and Architecture teams for additional visibility and prevention configurations.
- Other tasks that may be assigned from time to time.
Skills
- Incident Response
- Digital Forensics
- Network Security
- Packet Analysis
- Wireshark
- Volatility
- MITRE ATT&CK
