senior systems Engineer cisoc - business services, philippinesBoehringer Ingelheim

Job Description Description As a member of Cyber Intelligence & Security Operations Center (CI&SOC) team his main duties will be: * Working collaboratively to prevent, detect and respond to information security incidents following operational pr Job Description Description As a member of Cyber Intelligence & Security Operations Center (CI&SOC) team his main duties will be: Working collaboratively to prevent, detect and respond to information security incidents following operational procedures. Perform tasks including research, classification and analysis of security events and vulnerabilities that occur on the network or endpoint. Accountable to manage security incidents, including Major Security Incidents and coordinate response with other teams. Activities include analysis and interpretation of security-related events, identifying trends and taking corrective action. Working in close collaboration with the IT Team members and stakeholders to deliver and implement technology solutions in support of the business objectives to improve productivity and enhance processes. Understand BI framework and follow defined processes. Ensure compliant documentation requirements and guarantee its production as required according to the SOPs and working instructions. Requirements Experience: Professional experience of 3 years (at least) providing services in a SOC (Security Operations Center). Solid understanding of Linux and Windows operating systems, common networking protocols, vulnerability management and deep packet inspection technologies. Experience in the following areas: Security Incident Response (live triage, memory analysis, disk analysis and network traffic analysis), Malware analysis (Understanding of malware Kill Chain, Exploit kit, download, install, call back, C&C&hellip). Experience in the principals of network and endpoint security, current threat, and attack trends, and working knowledge of security principals such as defense in depth and causes of security events. Advanced knowledge of common system exploits, network attacks, web protocols, phishing techniques and malware. Advanced knowledge of security incident handling concepts. Programming experience in scripting languages like (Python, PowerShell or Bash) Experience working in a virtual, international and multicultural environment. Analytical thinking, good communication, problem solving, results oriented, agility and teamwork skills. Security certifications like GCIH, E|CIH, IHRP or OSCP, CEH are desired but not mandatory. Knowledge in OT (Operational Technologies) / ICS (Industrial Control Systems) is a plus, but not mandatory Mandatory Skills: Excellent spoken and written English. Programming experience in scripting languages like (Python, PowerShell or Bash) Cybersecurity knowledge as described above Excellent spoken and written English. Programming experience in scripting languages like (Python, PowerShell or Bash) Cybersecurity knowledge as described above Additional Skills: Undefined - 24x7: The resource will provide a 24x7 Service Regional Support: The service support is organized regionally Specialized Hub: Should be in a specialized IT Service Center Travel Considerations: Potential travels for projects and workshops (1-2 weeks per year) On Call requirements: Yes, 24x7 rotative together with other team members (Average one week every other month)
Monster

Philippines Africa
Permanent
Full-time