https://www.linkedin.com/jobs/view/2513790458/?alternateChannel=search&refId=SqhRhiOEo27DrNN7WLtfnw%3D%3D&trackingId=S3sx9Yxw2%2FcfqPkPb%2BOKVA%3D%3D

Threat Hunting & Response Senior Analyst

Novartis Czech Republic

Czechia, Europe

The CSOC is an advanced global team passionate about the active defense against the most sophisticated cyber threats and attacks. The Threat Hunting and Response Senior Analyst will leverage a variety of tools and resources to proactively detect, investigate, and mitigate emerging and persistent threats impacting networks, systems, users, and applications. This role will involve coordination and communication with technical and nontechnical teams, including security leadership and business stakeholders. As an experienced skilled analyst, this role will also involve coaching and mentoring of more junior analysts. Your key responsibilities: Effectively investigate to identify root cause, including attack, vector, exploitation, and other techniques utilized to bypass security controls, Accurately diagnose impact, damage, and mitigation techniques needed to restore business operations and minimize reoccurrence, Identify technology and process gaps that affect CSOC services, develop solutions and make recommendations for continuous improvement, Provide oversight and support for first level monitoring and triage to ensure effective operations and mitigation of lower impact incidents, Good cultural orientation and strong influencer of information risk management, information security, IT security, to be embedded across, IT, OT and Medical Technologies. Minimum Requirements: 6+ years of experience in Incident Response / Computer Forensics /CSOC team / Threat Hunting or related fields, Experienced IT administration with broad and in-depth technical, analytical and conceptual skills, Experience in reporting to and communicating with senior level management (with and without IT background, with and without in depth risk management background) on incident response topics, Excellent written and verbal communication and presentation skills; interpersonal and collaborative skills; and the ability to communicate information risk-related and incident response concepts to technical as well as nontechnical audiences, Excellent understanding and knowledge of general IT infrastructure technology and systems, Proven experience to initiate and manage projects that will affect CSOC services and technologies. Desirable requirements: Professional information security certification, such as CISSP, CISM or ISO 27001 auditor / practitioner is preferred. Professional (information system) risk or audit certification such as CIA, CISA or CRISC is preferred.