Incident Response Team Leader

שתף משרה זו

Incident Response Team Leader

זיהוי דרישה: 3650

מיקום גאוגרפי: חיפה

חברה: ElbitSystems

עיר: חיפה

תאור משרה

Elbit is looking for an Incident Response Team Leader for the Global Threat Detection and Response group located in Haifa

תחומי אחריות

:Responsibilities

Lead and assist with every stage of cyber incident response lifecycle including: Containment, analysis and investigation, remediation, reporting and lessons learned process

Provide strong direction for the Incident Response efforts, coordinating with both internal and third-party resources to drive investigations

Conduct host forensics, network forensics, log analysis, and malware triage in support of incident response investigations

Recognize and codify attacker tools, tactics, and procedures (TTPs) in indicators of compromise (IOCs) that can be applied to current and future investigations

Managing a team of professional security cyber incident handlers, including performing management, career development and mentoring

Research and develop new digital forensics techniques, scripts and methodologies to enhance Elbit's incident investigation processes

Develop and update playbooks and automation in SOAR platform to enhance overall IR process

Develop and present comprehensive and accurate reports, trainings and presentations for both technical and executive audiences

ניסיון מקצועי

Minimum 3 years of Incident Response or relevant experience, including at the following domains: threat hunting, threat detection & response or malware analysis

Solid management experience, including motivating employees and leading cross-organizational processes

Strong knowledge of IR, forensics and investigation by common standards: SANS, NIST

Strong knowledge with common DFIR tools, digital forensics, disk and memory collection & analysis, Memory & Network dump and mobile device

Strong knowledge with Windows/Linux Operation Systems

Hands-on experience in Security systems/platforms such as EDR, SIEM, Splunk/ELK, SOAR

Experience with threat hunting, on both endpoints and networks

Experience in investigating mobile devices, using common investigate tools in the industry

Experience with one scripting or developing language (Python/bash)

In-depth thinker, excellent verbal presentation skills