Associate - Information Security Systems

at  World Resources Institute

KNOWLEDGE OF MICROSOFT 365 DEFENDER (25%):

• AZURE AD, Azure AD Identity Protection
• Must have good knowledge of Microsoft 365 Defender
• Must have good experience with Microsoft Defender for endpoint
• Must have good knowledge about DLP

ABOUT US:

Founded in 1982, World Resources Institute (WRI) is an independent, nonprofit global research organization that turns big ideas into action at the nexus of environment, economic opportunity, and human well-being. We are working to address seven critical challenges that the world must overcome this decade to secure a sustainable future for people and the planet: climate change, energy, food, forests, water, sustainable cities, and the ocean. WRI has a global staff of over 1,800 people with work spanning 60 countries. We have offices in Africa, Brazil, China, Europe, India, Indonesia, Mexico, Colombia and the United States, as well as a growing presence in other countries and regions.
The foundation of our work is delivering high-quality research, data, maps, and analysis to solve the world’s greatest environment and international development challenges and improve people’s lives. We work with leaders in government, business, and civil society to drive ambitious action and create change on the ground. Equally important, we bring together partners to develop breakthrough ideas and scale-up solutions for far-reaching, enduring impact.

Monitor and Respond to Security Incidents, requests, and queries (25%):

• Monitor and Respond to Security Incidents, requests, and queries (Cyber, Privacy, and Fraud)
• Initiate Emergency Response Process when needed
• Drive the lifecycle of security incidents from initial triage through root-cause-analysis & corrective/preventive measures
• Efficient communication with key stakeholders including senior responders & Support Teams during Security Incidents

Advanced understanding of TCP/IP, common networking ports and protocols, traffic flow, system administration, OSI model, defense-in-depth, and common security elements (25%):

• Ability to identify compromised computers using logs, packet capture, and related computer-centric evidence sources
• Develop advanced capabilities necessary to monitor and detect indicators of compromise using security scripts, tools, and services
• Must have good knowledge on Kusto Query language (KQL)
• Advanced understanding of TCP/IP, common networking ports and protocols, traffic flow, system administration, OSI model, defense-in-depth, and common security elements