Senior CSOC Consultant

Help AG is looking for an experienced Senior CSOC consultant in the Cyber Security Operations Centre the role will contribute to the effective operation of the CSOC, ensuring the protection of the organization's assets. The role will proactively identify threats and risks, implement detection and response processes within the CSOC and perform Cyber security incident investigations. The role is expected to coordinate with ITD Stakeholders to ensure smooth operation of CSOC's supporting technologies, demonstrate deep understanding of cyber threats, proactive identify, monitor and respond to potential risk events.

Responsibilities

• Build effective relations within ITD to ensure the effective delivery of CSOC services and response to events.
• Promote awareness and support the implementation of appropriate controls and processes.
• Support relationships with the Managed Security Service Provider, working closely to ensure adequate coverage and mutual understanding of security needs and expectations.
• Operate and maintain the CSOC technology stack.
• Execution of CSOC event and incident investigation processes to detect and analyze malicious activity, ensuring timely identification and response to security threats.
• Support the identification and implementation of security monitoring use cases based on the cyber threats as identified by threat modelling, threat intelligence and environmental factors.
• Draft, maintain and improve playbooks and incident response plans aligned with monitoring use cases.
• Design, implement and oversee the deployment of automated actions to ensure prompt containment and response measures are effectively executed.
• Design, implement and execute vulnerability and compliance management activities, including stakeholder reporting.
• Provide reporting and metrics in support of IT Security, CSOC, Vulnerability Management and Compliance management requirements.
• Provide constructive feedback to IT Security regarding identified control and monitoring gaps to improve security posture.
• Enable reporting and monitoring to ensure that all applications/products/services being implemented are in accordance with security specifications.
• Review MSSP activities to ensure adherence to the Statement of Work and Service Level Agreements, ensuring contractual obligations are met.
• Support on the development of the Cyber-Security Operations Centre Roadmap and the execution of tasks and activities to implement required capabilities as per the roadmap.
• Provide technical support and foster an environment of collaboration, commitment, and team spirit.
• Review the design quality of others to ensure adherence to standards and identify corrective action, if needed.
• Support team members in line with the mission, vision, values, goals, and performance standards and ITD.
• Foster an environment of collaboration, commitment, and team spirit. Inspire, motivate, and guide junior team members.
• Run training sessions for other members of the team, transferring knowledge across the domain.
• Keep abreast of market conditions.
• Analyze risks, escalate issues, and report breaches of police, as necessary.
• Serve as a role model by consistently adhering to all policies and procedures.

Qualifications & Skills

• Minimum 5 - 7 years relevant experience working within a security organization of a financial institution or other highly regulated company.
• Relevant Information Security certifications, education, or training e.g.: CISSP, CCSP, CISA, CISM, OSCP, SANS, etc.
• Bachelor’s Degree is required.
• Development experience or knowledge of common programming languages.
• Expertise implementing and operating SIEMs, Security Analytics, Endpoint Detection and Response tooling.
• Expertise in SIEM use case, playbook development etc.
• Proven experience in cyber security event and incident investigations.
• Experience in a CSOC Tier 3 role.
• Proven experience in managing CSOC, Vulnerability and Compliance Manag