Requirements
A bachelor's degree in Computer Science, Cybersecurity, Information Security, Information Technology, or an equivalent discipline is required. A minimum of 2 years of relevant experience in information security or cybersecurity is necessary. Proficiency in Cybersecurity Incident and Investigation, Information Security, and IT Operations Management is expected, along with developing competencies in Collaboration and Communication, Customer Focus, Enablement of Change and Innovation, Professionalism, Project Management, Results Oriented, and Vendor Management.
Description
Purpose of JobJobholders at this level perform their duties with minimal supervision and within established guidelines, policies, and procedures.The role is responsible for monitoring and analyzing information security and cybersecurity operations, evaluating IT assets, analyzing identified threat intelligence, investigating security alerts and suspicious activities, and extracting actionable insights to mitigate system and network vulnerabilities. The role also contributes to developing security use cases and enhancing monitoring coverage to protect the Authority's systems, networks, and operations.Job Resposiblites Monitor and analyze security alerts and events and conduct initial assessments of suspicious activities to identify malicious behavior and determine its potential impact on the Authority's systems and networks.Investigate and classify security alerts and suspicious cases that may pose a threat to the Authority's network and recommend appropriate preventive and mitigating actions.Analyze cybersecurity threat intelligence and assess relevant IT assets to identify potential risks, indicators of compromise, and system or network vulnerabilities. Conduct root cause analyses of security incidents and alerts and recommend improvements to security controls and monitoring mechanisms. Develop and enhance security use cases based on recognized best practices, emerging threats, and the Authority's operational requirements. Validate and optimize security use cases to ensure their effectiveness in detecting malicious or unusual activities.Expand security event log source coverage and support the integration of additional log sources to improve threat detection capabilities.Comply with all applicable policies, processes, standard operating procedures, and cybersecurity requirements to ensure that activities are performed correctly and consistently. Support the resolution of escalated operational issues and provide guidance to less-experienced employees to ensure efficient work execution. Escalate complex incidents and issues to the appropriate parties to ensure they are addressed and resolved properly. Job DetailsCommunication and ContacsEducationA bachelor's degree in Computer Science, Cybersecurity, Information Security, Information Technology, or an equivalent discipline is required.ExperienceA minimum of 2 years of relevant experience in information security or cybersecurity.CompetenciesCollaboration and Communication - DevelopingCustomer Focus - DevelopingCybersecurity Incident and Investigation - ProficientEnablement of Change and Innovation - DevelopingInformation Security - DevelopingIT Operations Management - ProficientProfessionalism - DevelopingProject Management - DevelopingResults Oriented - DevelopingVendor Management - Developing