Cyber Security Analyst

Soho Square Solutions is seeking a Cyber Security Incident Response Senior Manager responsible for driving incidents to resolution and ensuring accurate communications with customers and executives. The role involves managing incident response teams, determining attack scopes, and enhancing incident response processes.

Responsibilities:

• Performs incident response management duties as oversight of the Global SGSC Cyber Security Incident Response teams
• Provide timely and relevant updates to SAP leadership and internal stakeholders
• Manage the process of determining the attack scope and root cause analyses by using forensic investigation methods
• Partner with internal teams to review monitoring requirements and create detection alerts
• Manage the development of automated workflows that will reduce detection and response times
• Ensures the review and closure of resolved and end-user confirmed cybersecurity incidents
• Manage and enhance current Incident Response process workflows and recommends improvements
• Participate in after action reviews and ensure that all recommended remediations are handed to the Incident Response Recovery team

Requirements:

• Bachelor's or master's degree in Computer Science, Information Security, Information Systems, Engineering or related work experience
• Understanding of one or more technical areas like: Network protocols (TCP/IP, TLS, HTTP, DNS, SMB, etc.)
• Understanding of one or more technical areas like: File systems (exFAT, NTFS, ext4, APFS, etc.)
• Understanding of one or more technical areas like: Memory forensics
• Understanding of one or more technical areas like: Database and web application security
• Understanding of one or more technical areas like: Cloud security
• Technical knowledge of information technology systems and infrastructure
• Understanding of risk management, mitigation, and incident response frameworks
• Experience communicating with senior management and executives
• Knowledge of relevant laws and regulations related to incident response and data privacy
• Strong IR skills and global IR team leadership experience (leading teams in US, EMEIA, APAC regions)
• Experience with SIEM, EDR, forensic analysis, root cause analysis, post incident reviews
• Strong communication skills and executive presence. Demonstrated experience briefing and presenting to security, technology, and business stakeholders
• Comfort and commitment to work London hours
• Experience with developing strategy for IR teams and leading projects to enhance IR program, processes and capabilities