Cyber Security Advanced Investigation Expert

Tasks

Security and Privacy Incident Response

• Identify cybersecurity threats and perform analysis of reported anomalies on networks and systems.

• Mitigate and contain identified threats

• Initiate escalation procedures and incident response processes

• Works as part of a multidisciplinary team in the delivery of information security and privacy response services to the global retail and commercial enterprise.

• Responsible for the management of events, including notification, escalation response and post incident review.

• Delivers the execution of triage controls to detect and prevent attackers from infiltrating company information or jeopardizing e-commerce programs.

• Escalates to management regarding the negative impact on the business caused by theft, destruction, alteration or denial of access to information.

• Delivers recommendations and actions to improve the detection, escalation, containment and resolution of data security incidents.

Initiative Delivery

• Establish and deliver detection & incident response methods, tools and processes which provide the organization value by reducing risk.

• Identify trends, potential new technologies, and emerging threats which may impact the whole business

• Deliver response focused initiatives leveraging experience in doing so previously.

General Advice and Guidance

• Provide support in relation to the other teams and functions as and when dictated by workloads and deadlines.
• Provide general advice and guidance on Information Security related matters when required.
• Provision of out of hours support and investigation as and when required.

Requirements

• University / college degree in Computer Science, Engineering or related field

• 5+ years experience in Security/Cyber Defence

• Proven track record of working Global IT services (Global IT security services preferable)

• Previous security operations centre experience is desire

• Understanding of networking protocols and infrastructure designs; including routing, firewall functionality, host and network intrusion detection/prevention systems, encryption, load balancing, and other network protocols.

• Has an understanding of emerging security technologies.

• Solid knowledge of processes and workflows for SIEM environments

• Ability to convey security concepts related cybersecurity events to both technical and non-technical audiences

• One or more of the following: Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP), GIAC Certified Incident Handler (GCIH), GIAC Certified Intrusion Analyst (GCIA)

• Background in one or more of the following: Anti-Malware, Vulnerability Management, Intrusion Detection/Protection, Perimeter Security, Security Incident Management, Security Risk Assessments, Information protection, Security Information and Event Management (SIEM), Penetration Testing (application, network, host, social)

• Ability to recognize security events of interest

• Background with enterprise security products, such as firewalls, next generation firewalls, IDPS, WAF, AV, DDoS prevention, AV, content and URL filtering, etc

• Knowledge of and experience with security monitoring methodologies such as packet capture, flow data, patterns, watch lists, black lists, log parsing, correlation, classification, event generation and filtering.

• Experience with Linux/Unix

• Understanding of current hacking techniques, vulnerability disclosures, data breach incidents and security analysis techniques

• Excellent demonstrable oral and written communication skills in English, Slovakian (advantage), Croatian (advantage)

What we offer

• A working location in 11th district

• Flexi time, home office possibilities, 2 HO per week

• Work together and learn from experienced team

• Project related travelling possibilities in the region

• Career opportunities within MOL Group

• Annual bonus

• Maximalized - Gross 800.000 HUF - annual fringe benefits (with elements of SZÉP card, All you can move card, culture and sport event, health and pension insurance allowance, etc)

• Loyalty bonus (after 3 years of employment)

• Support at all stages of family life – baby born allowance, extra paid paternity leave, paid leave for single parents, MOL Égigerő kindergarten support and MOL Campus Égigerő daycare, school start support, student loan support)

• Support in difficult situations (health insurance support for employees with diability,advance salary payment, etc.)

• Preparation for retirement (pre-retirement support, pensioner benefits, company loyalty program)

• Awards and recognitions (extra leave days, project reward, leadership reward, etc.)

• Support for physical and mental well-being (fitness center, health programs and company help line)

• Other company benefits (MOL partner benefits, discounted fueling)

• Community building (MOL open day, family days, cooking days, Christmas concert)

• Discounted phone fleet package for family members

• Discounted MediCare health insurance for family members

• Life and accident insurance

• Travel allowance - 40 HUF/km