Some highlights

• Being part of an international company yet with local presence
• Build a safer digital society together with us
• Become part of a great team

CSIRT analysts play key roles on cybersecurity and investigation teams. These professionals are specialized in gathering and analysing data related to internal cyber incidents and external attacks (hacks).

CSIRT analysts apply their skills to not only solve cases like hacking, fraud, terrorism, espionage, organized cybercrime, but also provide post mortem input that will help organisations to limit the business impact of future cyber incidents.

Working as a CSIRT Analyst

• Conduct analysis of log files, evidence, and other information to determine best methods for identifying the perpetrator(s) of a network intrusion.
  
• Confirm what is known about an intrusion and discover new information, if possible, after identifying intrusion via dynamic analysis.
  
• Provide technical summary of findings in accordance with established reporting procedures.
  
• Examine recovered data for information of relevance to the issue at hand.
  
• Perform file signature analysis.
  
• Perform file system forensic analysis
  
• Collect and analyse intrusion artifacts and use discovered data to enable mitigation of potential cyber defense incidents within the enterprise.

What makes you stand out

• Have an empathic personality with excellent communication and presentation skills.
• Are able to maintain a clear head in high stakes, high pressure situation.
• Have a analytical mind that likes solving problems and can research independently.
• Have a strong knowledge of host forensic analysis (Windows/Linux) and networking protocols/principles.
• Have skills in malware triage to determine whether an identified file exhibits potential malicious intent
• Are able to review log files and perform data enrichment and analysis.
• Have experience of working in security-driven environments and knowledge of security principles relating to best practice.
• Have extensive knowledge in fundamental principles of risk, assessment, treatment, and mitigation.
• Knowledge of information security frameworks and standards such as ISO27001, NIST and SANS.
• Have the following relevant certifications as a plus: CISSP, GCIA, GSEC, GCIH, GCED, GCFA, GREM.