1 of 1 Permanent Incident Response Jobs in Fife

to identify incidents ensuring that all events, events of interest, exceptions & incidents are responded to in accordance with established SOC work instructions, including remedial action/recommendations. * Complete post incident reporting. Responsible for SOC work instructions, ensuring they are reviewed & amended. * Use Case Factory development * Playbook design and development * Use Case & Playbook validation before going live * Maintain currency in … Tactics, Techniques and Procedures (TTPs) * SANS SEC401: Security Essentials (or equivalent) * SANS SEC503: Network Monitoring and Threat Detection In-Depth (or equivalent) * SANS SEC504: Hacker Tools, Techniques, Exploits and Incident Handling (or equivalent) *Desirable* * Knowledge of Reverse Engineering Malware * Practical Junior Malware Researcher (PJMR) * SANS SEC488: Cloud Security Essentials (or equivalent) * CREST Certified Network Intrusion Analyst (CCNIA) (or equivalent … SANS FOR508: Advanced Incident Response, Threat Hunting and Digital Forensics (GCFA) *Soft Skills/Qualifications* * The 3rd Line Analyst is expected to be able to present and write professional reports to key stakeholders * All staff are expected to exercise good time management and work as part of a team You will work from Airbus Protect offices, Newport, South More ❯