Senior Incident Responder (Forensic and Threat Hunting)

Company



Munich Re America Services



Location



Amelia
, United States

We are looking for a Senior IT Risk Technical Specialist - Incident Responder to be part of the Global Cyber Defense Center (GCDC), focused on the continuous prevention, protection, detection, and response capabilities against threats, exploitable vulnerabilities, and real-time incidents in the global Munich Re network

The Incident Responder has a specific area of responsibility within the IT Risk and Security group to protect Munich Re against active threats. To do so, the Incident Responder must work with IT Service Managers and external service providers to define where monitoring is to be done and the use cases that should be monitored for. As events are identified that meet these criteria, the Incident Responder again must work with these service providers to gather information about the scope and severity of the events. This information will be presented to the Security Incident Evaluation and Security Incident Response teams, so that they can make important decisions regarding the handling of any potential incidents. The Incident Responder must then continue with remediation and documentation of such incidents to closure.

YOUR JOB

• Monitoring alert queues and responding to security alerts as a Level 3 responder
• Acting as a Tier 3 triage contact, collecting and analysing security data, maintaining artefacts, as well as developing insights to advise the SIET and SIRT.
• Handling incident escalations as part of the IS Work Instruction
• Rudimentary malware and forensic analysis to understand impact, enable containment and recover from incidents
• Partnering with internal and external penetration testers to work in Purple Team engagements with the goal of developing additional improvements to our company security posture
• Proactive hunting for threats and collaborating with other Threat Hunters
• Consulting on advisories from Cyber Threat Intelligence
• Preparing detailed reports and providing summaries on progress of investigations

YOUR PROFILE

• Technical degree (preferably in IT) or an IT Security expert with outstanding knowledge of operating systems and network protocols (past experience with system, network engineering as well as pen-testing is welcome)
• Good understanding of SIEM, network security technologies and tools
• Preferred experience with digital forensics, threat hunting, malware analysis, SOAR and detection tuning
• Very good knowledge of threat modelling frameworks, attacker mindset and defence-in-depth concepts
• Excellent technical understanding of security operations and related processes
• A minimum of 2 years of experience in a SOC environment, as a Level 2 or higher responder with relevant GIAC or EC-Council certifications desired
• International experience from work within complex, global IT organisations
• Customer orientation, strong team working skills and experience in dealing with service providers
• Highly result oriented and structured
• Very good command of English, both spoken and written