Incident Response Team Leader

תאור משרה

Elbit is looking for an Incident Response Team Leader for the Global Threat Detection and Response group located in Haifa
 

תחומי אחריות

:Responsibilities
Lead and assist with every stage of cyber incident response lifecycle including: Containment, analysis and investigation, remediation, reporting and lessons learned process
Provide strong direction for the Incident Response efforts, coordinating with both internal and third-party resources to drive investigations
Conduct host forensics, network forensics, log analysis, and malware triage in support of incident response investigations
Recognize and codify attacker tools, tactics, and procedures (TTPs) in indicators of compromise (IOCs) that can be applied to current and future investigations
Managing a team of professional security cyber incident handlers, including performing management, career development and mentoring
Research and develop new digital forensics techniques, scripts and methodologies to enhance Elbit's incident investigation processes
Develop and update playbooks and automation in SOAR platform to enhance overall IR process
Develop and present comprehensive and accurate reports, trainings and presentations for both technical and executive audiences

ניסיון מקצועי

Minimum 3 years of Incident Response or relevant experience, including at the following domains: threat hunting, threat detection & response or malware analysis
Solid management experience, including motivating employees and leading cross-organizational processes
Strong knowledge of IR, forensics and investigation by common standards: SANS, NIST
Strong knowledge with common DFIR tools, digital forensics, disk and memory collection & analysis, Memory & Network dump and mobile device
Strong knowledge with Windows/Linux Operation Systems
Hands-on experience in Security systems/platforms such as EDR, SIEM, Splunk/ELK, SOAR
Experience with threat hunting, on both endpoints and networks
Experience in investigating mobile devices, using common investigate tools in the industry
Experience with one scripting or developing language (Python/bash)
In-depth thinker, excellent verbal presentation skills