InfoSec Support - Consultant

InfoSec Support - Consultant Job Description

• ICS Analytical \ Problem Solving
• ICS - Incident Management
• ICS - Security Awareness and Training
• Log Analysis Correlation
• SIEM Security Tool Utilization
• Threat Detection Triage
• Use Case Detection Understanding

Key Responsibilities

• Monitor security events and alerts using SIEM and security monitoring tools to identify potential security threats and suspicious activities.
• Perform log analysis and event correlation across security platforms, operating systems, and network infrastructure.
• Conduct threat detection and triage activities to assess alert severity, impact, and required response actions.
• Support incident management activities including incident identification, classification, escalation, tracking, and closure.
• Investivate security alerts related to phishing, malware, brute-force attacks, unauthorized access attempts, and other cyber threats.
• Apply knowledge of MITRE ATTCK, cyber kill chain concepts, and attack techniques to support threat investigations.
• Analyze Windows and Linux operating system logs, processes, and security events to identify potential security issues.
• Perform basic security analytics and problem-solving activities to support threat detection and incident investigation.
• Utilize basic scripting or querying techniques to support log analysis, investigation, and operational efficiency.
• Apply networking fundamentals including TCP/IP, DNS, ports, and protocols during security investigations.
• Support security awareness activities by promoting adherence to security policies and best practices.
• Maintain incident records, investigation notes, operational documentation, and reporting artifacts.
• Collaborate with various teams and stakeholders to support effective security operations and incident response activities.

Behavioral Competencies

• Demonstrates ownership and accountability while supporting security monitoring and incident response activities.
• Collaborate effectively with various teams and business stakeholders to ensure smooth delivery.
• Maintains a security-first mindset while investigating threats and security events.
• Apply strong analytical and problem-solving skills to identify and resolve security incidents.
• Shows adaptability and willingness to learn evolving cyber threats, attack techniques, and security technologies.
• Communicates clearly by sharing incident status, risks, findings, and escalation requirements proactively.
• Maintains attention to detail during threat analysis, investigation, and incident documentation activities.
• Works effectively in dynamic environments with changing threat landscapes and operational priorities.
• Takes initiative in improving threat detection effectiveness and operational efficiency.
• Demonstrates a customer-centric mindset by protecting organizational assets and ensuring operational resilience.

Mandatory Competencies

• Information Security (InfoSec / Cyber Security) - Security Operations, Threat Detection Cyber Defense - Understanding of Cyber Attacks (phishing, malware, brute force, etc.)
• Information Security (InfoSec / Cyber Security) - Security Operations, Threat Detection Cyber Defense - Awareness of Threat Frameworks (MITRE ATTCK, Kill chain basics)
• Information Security (InfoSec / Cyber Security) - Security Operations, Threat Detection Cyber Defense - Basic Scripting/ Querying
• ICS - ICS Analytical \ Problem Solving
• Information Security (InfoSec / Cyber Security) - Security Operations, Threat Detection Cyber Defense - Security Analytics Problem Solving
• Information Security (InfoSec / Cyber Security) - Security Operations, Threat Detection Cyber Defense - Security Fundamentals (CIA triad, attack vectors, basic controls)
• Information Security (InfoSec / Cyber Security) - Security Operations, Threat Detection Cyber Defense - SIEM Security Tool Utilization
• Information Security (InfoSec / Cyber Security) - Security Operations, Threat Detection Cyber Defense - Threat Detection Triage
• Information Security (InfoSec / Cyber Security) - Security Operations, Threat Detection Cyber Defense - Use Case Detection Understanding
• Beh - Communication and collaboration