Cybersecurity Defence & Response Specialist
The Cybersecurity Defence & Response Specialist will be a part of the Global Cyber Defence & Response Team, being engaged both in operations and development side of the cyber defensive function. The role merges Incident Responder duties with Blue Team activities. They will be tasked with improving cyber defensive posture through work on detection and response mechanisms, automation rules and scripts, data analysis concepts and informing general Cyber Security team on proposed companywide improvements. The work requires also end-to-end incident response duties including triage, forensics, and remediation. This role also involves human interactions and multidepartment collaboration giving options to versatile development.
- Analyse alerts to identify malicious behaviours and threat actors
- Cooperate with all Cyber Defence constituencies on cyber defence operations
- Perform tactical actions to respond to cyber element; triage, data analysis, malware analysis, containment, live response, eradication etc.
- Perform on-the-host and on-the-network triage, initiate remediation efforts
- Contribute to project in any specialization within Cyber Defence domain
- Support the implementation of operational and strategic changes to cyber defence function
- Develop cross domain procedures and cooperation for operational excellence
- Cooperate with IT/OT as well as any other function required for incident response
- Hand over or accept pending incident analysis from another time zones
- As part of Asia Hub, the Cyber Defence and Response Specialist will collaborate with Region Cybersecurity team to inform on Global and Regional developments within the cyber threat operations.
• Higher degree in technical sciences, social sciences or general scientific field, mainly:
1. At bachelor level a BSc, BCs, BEng or BEng (Tech);
2. At master level a Cybersecurity, MEng, MCompliance, MCompSci, MInf, or related field.
• 5+ years of experience in a similar position or in cybersecurity consultancy
• Past responsibilities within the following roles; SOC operator, SOC analyst, Event Analyst, First Responder or similar
• Experience with modern and automated tech supporting forensics, network or host response, collection of data, monitoring, analysis, malware analysis, postmortem investigation etc.
• Understanding of the defensive operations and improvements like security tool administration, detection rule engineering, scripting, cloud security solution, query languages.
• Experience in Manufacturing and/or Food & Beverage Environment is considered a plus;
• Network services and protocols
• PowerShell, SQL-like query languages
• In depth understanding of the following processes; incident management and engineering
Job Referral Code - B
Careers with caring built in - discover our benefits here.
Ferrero began its journey in the small town of Alba in Piedmont, Italy, in 1946. Today, it is one of the world’s largest sweet-packaged food companies, with many iconic brands sold in countries all over the world. Find out more about Ferrero at ferrero.com.
Ferrero is committed to building a diverse and inclusive culture in which all employees feel welcomed and appreciated and have the same opportunities. We believe all our people are equally talented in their own way. In nurturing the curiosity and natural abilities of our employees, we provide them, generation after generation, the means to succeed personally and professionally, enabling them to craft their journey at Ferrero. The diversity of our talents is what makes our work environment multicultural, innovative, and highly rewarding.
Find out more here.