GENERAL SUMMARY:

As a key member of ASMGi’s Information Security Incident Response Team this individual will be responsible for various parts of the incident response process - detection, validation, containment, remediation, and communication - for IT based security events and incidents impacting ASMGi’s clients.
This individual will be responsible for the rapid response and resolution of security incidents including the ASMGi MDR / MSOC plus client’s environments. This will involve coordinating with teams including Legal, Security Operations and Forensics experts, internal or external, to identify root cause, restore services and communicate status to affected stakeholders.
This role will act as the escalation path for the ASMGi Operations Team to validate findings and identify scope of events and support during larger investigations. This individual will act as an internal and client facing resource while interacting with the third-party Security Operations Center as applicable.

KNOWLEDGE, SKILLS, AND ABILITIES REQUIRED:

• High level of technical expertise in information security, including deep familiarity with relevant penetration and intrusion techniques and attack vectors.
• Cybersecurity in large complex companies including knowledge of security and privacy breach laws and regulatory reporting.
• Proven experience working with Security Operations Center services, forensics firms.
• Demonstrated ability to lead and develop cohesive and collaborative management and operational teams internally and with a third-party.
• Proven experience implementing policies, procedures, and technology to detect and recover from a cybersecurity attack.
• Ability to demonstrate strong computer knowledge networks, desktops, servers, cloud, and software as a service technology.
• Expertise with next generation firewalls, Endpoint Detection and Response, Microsoft Advanced Threat Protection, Azure, and Office 365, Zero Day Threat Detection Technology, Threat Intelligence Feeds, Forensics, Data Loss Prevention Software, Web Proxies, Web Application Firewalls.
• Strong problem-solving and trouble-shooting skills.
• Strong communication skills including writing reports and presenting to senior executives.
• Demonstrated connections to external Incident Response leaders and learning organizations.