Deskripsi Pekerjaan
Are you a seasoned cybersecurity professional with a passion for protecting digital landscapes? NCS Group is looking for a Lead Consultant, IT Security to spearhead our security operations initiatives. In this pivotal role, you will be at the forefront of threat detection, incident response, and SOC strategy. You will collaborate with cross-functional teams to harden our infrastructure and ensure robust defense mechanisms against evolving cyber threats.
We offer a dynamic environment where innovation is encouraged, and your expertise will directly impact the safety and integrity of enterprise-scale systems. If you have a proven track record in leading Security Operations Centers and a deep understanding of the cybersecurity lifecycle, we want to hear from you.
Tanggung Jawab
- Lead and oversee the daily operations of the Security Operations Center (SOC) to ensure proactive threat monitoring and rapid incident response.
- Design, implement, and optimize SIEM solutions and security analytics tools to enhance visibility across the enterprise.
- Provide expert guidance on cybersecurity architecture, policy development, and compliance frameworks.
- Conduct deep-dive forensic investigations and threat hunting to identify potential vulnerabilities and active breaches.
- Mentor junior security analysts and lead technical training sessions to elevate the team's capabilities.
- Develop and maintain incident response playbooks, ensuring alignment with industry best practices (e.g., NIST, ISO 27001).
- Collaborate with internal stakeholders to bridge the gap between technical security requirements and business objectives.
Kualifikasi
- Bachelor’s degree in Computer Science, Information Security, or a related field.
- Minimum 8+ years of experience in IT Security, with at least 4 years in a SOC leadership or senior consultant capacity.
- Professional certifications such as CISSP, CISM, GCIH, or GCFA are highly preferred.
- In-depth technical knowledge of SIEM platforms (e.g., Splunk, Sentinel, QRadar) and EDR/XDR technologies.
- Strong understanding of network protocols, cloud security (AWS/Azure/GCP), and modern attack vectors.
- Demonstrated ability to lead high-pressure incident response situations and communicate effectively with stakeholders.
- Excellent analytical, problem-solving, and project management skills.