Cyber Security Consultant

PROFILE REQUIRED

Level of education/qualifications normally required:

• Graduate degree in Business or Management; Bachelor’s degree in computer science, Engineering, or related discipline with an IT focus.
• Certifications: (CISSP, OSCP, Certified Ethical Hacker (C|EH), GIAC, CREST, CISA) would be an asset.

Specific work experience:

• 5+ years of experience in IT Security.
• Experience working in a global environment and with virtual teams.
• Demonstrable experience performing a senior role in a SOC environment or similar, with a focus on cyber security incident detection, response and resolution. Experience leading major security incidents in complex organizations would be a plus.
• Broad technical security knowledge of IT services, technology and IT solutions. Specific experience in one or more of the following:
• Cloud Security
• Network Security
• System/Infrastructure Security
• Industrial Control Technology (ICT/OT) Security
• Strong understanding of security operations, engineering and toolsets used for detection and response, including threat intelligence, SIEM, SOAR and other technologies/platforms; with focus in process automation.
• Technology advocate and proficient in project / service management concepts and common tools.
• Confidence in owning a relationship with multiple third parties.

Technical / functional skills:

• Knowledge of modern attacker tactics, techniques, and procedures, and great awareness of cybersecurity trends.
• Ability to drive innovative ways to detect vulnerabilities and exploit activity, and neutralize them through advanced technological countermeasures.
• Experience in creating BAU runbooks, use-case definitions and operating procedures.
• Experience in the use of security frameworks and Methodologies such as MITRE ATT&CK, MaGMa, TaHiTI or NIST.
• Experience with managing threats associated with cloud platforms (AWS, Google) and artifacts (code, containers, hardware devices, infrastructure).
• Deep knowledge in application and infrastructure security, as well as security fundamentals (IAM, Data Protection, PKI, Network Security).
• Strong attention to detail with an analytical mind and outstanding problem-solving skills, especially in performing tasks such as log analysis.
• Ability to conduct deep technical research into issues and products.
• Strong reporting, dashboarding and communication skills; ability to write or present actionable intelligence derived from raw data for IT and Non-IT stakeholders.
• Expertise across a number of the following areas/tools: Google scripting, ServiceNow, JIRA, Splunk, QRadar, Kali Linux, NMAP, Burp, Reverse engineering, Digital Forensics.

Behavioral competencies:

• Ability to deal with difficult situations, unclear priorities and blocking stakeholders.
• Ability to communicate openly and effectively with many diverse constituencies and stakeholders.
• Ability to work decisively under heavy workload.
• Cultural sensitivity and social flexibility in a global corporate environment..
• High willingness to drive transformation and service improvement.
• Strong customer / end-user / client service orientation.
• Highly self-motivated and directed.
• Keen attention to detail.
• Capability for problem solving, decision making, sound judgment, assertiveness.