Cybersecurity Lead

What you will do:

• Develop and implement comprehensive cybersecurity strategies and policies.
• Lead incident response efforts, including investigation, containment, and remediation.
• Conduct regular security assessments, vulnerability scans, and penetration tests.
• Manage security tools and technologies (firewalls, IDS/IPS, SIEM, EDR, etc.).
• Provide guidance and training to internal teams on security best practices.
• Monitor threat intelligence sources and proactively address potential risks.
• Collaborate with IT, DevOps, and delivery teams to embed security into the development lifecycle.
• Hands-on experience in dynamic malware analysis.
• Collect the suspicious files/scripts and perform malware analysis using sandboxing.
• Incident Investigation and RCA Reporting: Lead incident investigations, analyzing alerts, and conducting evidence collection and triage. Generate Root Cause Analysis (RCA) reports to document, incidents, providing detailed findings and recommendations for remediation.
• Windows Administration: Performed Windows Server administration, including system configurations, user account management, patching, and security hardening, ensuring compliance with security best practices.
• EDR Management: Implementing and managing CrowdStrike Endpoint Detection and Response (EDR), configuring and managing the solution to provide advanced protection for endpoints, detect threats, and respond to security incidents effectively.
• Real-time log monitoring across diverse sources, including firewalls, IDS/IPS, Windows/Linux operating systems, Windows Servers, system applications, databases, web servers, and networking devices, ensuring seamless operations and security.
• Direct prior experience with core security technologies (SIEM, firewalls, IDS/IPS, HIPS, proxies, vulnerability scanners, AV, etc.)
• Determine the scope of a security incident and its potential impact on the Client network recommend steps to handle the security incident with all information and supporting evidence of security events.
• Prepare and present security reports to executive leadership.

Qualifications and Skills:

• 5-7 years of experience in cybersecurity, with at least 1 year in a leadership role.
• Strong knowledge of security frameworks and threat modeling.
• Hands-on experience with security technologies and incident management.
• Relevant certifications (e.g., CISSP, CISM, CEH) are a plus.
• Excellent analytical, problem-solving, and communication skills.

Education and Certifications:

• Bachelor’s degree in computer science, Information Security, or related field.
• Should becertified in one out of the three certifications - CISSP, CISM, CEH.