Incident Responder/Analyst (L1 & L2)

What We Do in Dias ? / About Dias

We are one of the top 5 technological solution providers in the world with the product tracking and tracing systems we develop. Thanks to our expertise in the field of Tracking and Tracing Systems development, we offer the most effective marking and tracking technologies tailored to the production, distribution and logistics infrastructure and business needs of different sectors.

The solutions produced by Dias provide the following advantages:

• It protects consumers from counterfeit, smuggled and illegal products.
• It prevents activities that harm the public sector by reducing unregistered economic activities.
• It supports domestic technology production by employing domestic labor in technology solutions.
• It reduces dependency on foreign countries in production and technology applications by increasing efficiency in the use of domestic resources.
• It ensures that these goals are achieved more effectively, quickly, planned and economically thanks to the Product Tracking Platform.

We are looking for “Incident Responder/Analyst (L1 & L2)” to join the inspiring journey of Dias, a unique technology solutions provider in its field in Turkey.

Job Overview:

The Incident Responder/Analyst is a crucial member of the Security Operations Center, responsible for the swift and effective response to security incidents and alerts. Will monitor various platform availability as well as SIEM alarms responding as necessary. The role is part threat hunting, part incident analysis, part first responder and escalatory dispatcher.

The role requires a detail-oriented individual with a background in cybersecurity operations, forensic analysis, and incident management. The Incident Responder/Analyst will work closely with other SOC and larger Cybersecurity group members to identify, analyze, and mitigate threats to the organization's information assets. Depending on experience role will act as Level 1 or Level 2 of SOC.

Ideal candidate will have previous experience in a SOC environment or have conducted similar activities with some demonstratable hands-on experience of security platform or network operations.

What we expect? / Duty And Responsibilities :

• Monitor and analyse security alerts from various sources within the enterprise and determine the potential impact on the company.
• Conduct initial incident triage, classify the severity, prioritize responses and if necessary, trigger escalations to Level 3 security operations in accordance with SOC procedures & playbooks.
• First responder to cybersecurity incidents, coordinating with different departments and external stakeholders as necessary.
• Analyse, improve detection & response capabilities, contributing to new corelations and playbooks.
• Document and maintain clear and concise incident reports and logs.
• Perform post-incident analysis and contribute to the after-action review process, identifying lessons learned and actions to improve future response efforts.
• Develop and refine incident response strategies and lessons-learned to enhance the speed and effectiveness of the SOC's response to threats.
• Conduct proactive threat hunting activities to detect and mitigate threats before they materialize into incidents.
• Stay updated with the latest security threats, attack techniques, mitigation techniques, and industry best practices.

Qualifications We Are Looking For :

• Strong understanding of cybersecurity principles, frameworks, and best practices.
• Proficiency in incident response tools & platforms (SIEM, EDR, FW, forensics tools, etc.).
• Good understanding of cyber threats and attack vectors as well as their mapping to local assets.
• Good problem-solving and analytical skills, with the ability to analyse complex security threats and incidents.
• Good communication & documentation skills, with the ability to convey complex security issues to both technical and non-technical audiences.
• Prior operations background in IT or Network infrastructure would be a plus.
• Relevant cybersecurity certifications, MITRE ATT&CK experience are preferred.

Working Conditions :

The Incident Responder/Analyst may be required to work in shifts, including nights, weekends, and holidays, to provide 24/7 coverage for the SOC. The role may also involve high-pressure situations and dealing with complex security incidents. This role is a hybrid work model and may be based out of Istanbul or Izmir.

What is in it for you?

• Creating Impact in Different Sectors: Dias' projects that include technology solutions create great economic and social impacts with its wide stakeholder networks. By taking part in the development of these projects, you can gain rich experiences and contribute to the benefits that will make a difference throughout the country.

• Taking Initiative in Innovative Projects: The opportunity to work in a dynamic and innovative work environment where you can take initiative in the design of projects that have not been implemented before awaits you.

• Work and Life Balance: In our different offices throughout Istanbul, you can work in harmony with our valuable team members in a work environment that supports work and private life balance.

• Culture that values ​people: You can have the chance to be a part of a technology group that sees human resources as the most important value.