Manage the BAU on Emergency Response and Logs & Detection topics.
Manage relationship with vendors and stakeholders for specific change activities / tools
Build and operate CSIRT use cases, in close coordination with other security functions and technology teams.
Lead Threat Hunting exercises to prevent security incidents, analyze actual incidents & alerts.
Build the Threat Intelligence capability by utilizing internal and external data sources.
Provide input to the department’s management in order to enhance the information security response process.
Contribute to implementation of policies and procedures in day-to-day business activities, such as Control Testing Review and Update Incident/Alert Management Procedure.
Contribute to the reporting of all incidents according to the Incident Management System