Cyber Security Advanced Investigation Expert

Tasks

Security and Privacy Incident Response

• Identify cybersecurity threats and perform analysis of reported anomalies on networks and systems.
• Mitigate and contain identified threats
• Initiate escalation procedures and incident response processes
• Works as part of a multidisciplinary team in the delivery of information security and privacy response services to the global retail and commercial enterprise.
• Responsible for the management of events, including notification, escalation response and post incident review.
• Delivers the execution of triage controls to detect and prevent attackers from infiltrating company information or jeopardizing e-commerce programs.
• Escalates to management regarding the negative impact on the business caused by theft, destruction, alteration or denial of access to information.
• Delivers recommendations and actions to improve the detection, escalation, containment and resolution of data security incidents.

Initiative Delivery

• Establish and deliver detection & incident response methods, tools and processes which provide the organization value by reducing risk.
• Identify trends, potential new technologies, and emerging threats which may impact the whole business
• Deliver response focused initiatives leveraging experience in doing so previously.

General Advice and Guidance

• Provide support in relation to the other teams and functions as and when dictated by workloads and deadlines.
• Provide general advice and guidance on Information Security related matters when required.
• Provision of out of hours support and investigation as and when required.

Requirements

• University / college degree in Computer Science, Engineering or related field
• 5+ years experience in Security/Cyber Defence
• Proven track record of working Global IT services (Global IT security services preferable)
• Previous security operations centre experience is desire
• Understanding of networking protocols and infrastructure designs; including routing, firewall functionality, host and network intrusion detection/prevention systems, encryption, load balancing, and other network protocols.
• Has an understanding of emerging security technologies.
• Solid knowledge of processes and workflows for SIEM environments
• Ability to convey security concepts related cybersecurity events to both technical and non-technical audiences
• One or more of the following: Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP), GIAC Certified Incident Handler (GCIH), GIAC Certified Intrusion Analyst (GCIA)
• Background in one or more of the following: Anti-Malware, Vulnerability Management, Intrusion Detection/Protection, Perimeter Security, Security Incident Management, Security Risk Assessments, Information protection, Security Information and Event Management (SIEM), Penetration Testing (application, network, host, social)
• Ability to recognize security events of interest
• Background with enterprise security products, such as firewalls, next generation firewalls, IDPS, WAF, AV, DDoS prevention, AV, content and URL filtering, etc
• Knowledge of and experience with security monitoring methodologies such as packet capture, flow data, patterns, watch lists, black lists, log parsing, correlation, classification, event generation and filtering.
• Experience with Linux/Unix
• Understanding of current hacking techniques, vulnerability disclosures, data breach incidents and security analysis techniques
• Excellent demonstrable oral and written communication skills in English, Slovakian (advantage), Croatian (advantage)

What we offer

• A working location in 11th district
• Flexi time, home office possibilities, 2 HO per week
• Work together and learn from experienced team
• Project related travelling possibilities in the region
• Career opportunities within MOL Group
• Annual bonus
• Maximalized - Gross 800.000 HUF - annual fringe benefits (with elements of SZÉP card, All you can move card, culture and sport event, health and pension insurance allowance, etc)
• Loyalty bonus (after 3 years of employment)
• Support at all stages of family life – baby born allowance, extra paid paternity leave, paid leave for single parents, MOL Égigerő kindergarten support and MOL Campus Égigerő daycare, school start support, student loan support)
• Support in difficult situations (health insurance support for employees with diability,advance salary payment, etc.)
• Preparation for retirement (pre-retirement support, pensioner benefits, company loyalty program)
• Awards and recognitions (extra leave days, project reward, leadership reward, etc.)
• Support for physical and mental well-being (fitness center, health programs and company help line)
• Other company benefits (MOL partner benefits, discounted fueling)
• Community building (MOL open day, family days, cooking days, Christmas concert)
• Discounted phone fleet package for family members
• Discounted MediCare health insurance for family members
• Life and accident insurance
• Travel allowance - 40 HUF/km