Cyber Defence Officer, CDC lead

at  Finnair Oyj

Finnair is a diverse community of professionals who work ambitiously with a big heart and commitment. We cherish our strong safety culture, never taking it for granted, and courageously and determinedly keep sustainability at the core of our everyday work. We find meaning in our purpose: to enrich lives by bridging the world, and our identity and service mindset stems from our iconic brand’s Nordic heritage. Our values - Commitment to care, Working Together, Simplicity and Courage - guide us in everything we do.

YOUR RESPONSIBILITIES IN THIS ROLE WILL INCLUDE:

• Provide leadership in our Cyber Defence Center
• Developing and managing monitoring and detection capabilities and technologies
• Managing our Security Operations Center partners and other MSSPs
• Developing and managing cyber security incident response plans and running the Cyber Security Incident Response Process
• Developing and managing technical security testing practices and vulnerability monitoring activities
• Developing and managing Cyber Threat Intelligence technologies and practices
• Reporting on cyber threats and incidents
• Managing Cyber Defence Center’s services, processes, and service providers
  None of this will of course be done alone, as others in the unit and our vendors participate, and these are all joint effort.

AN IDEAL CANDIDATE FOR THIS ROLE WILL HAVE:

• Knowledge of
• cyber threats, threat actors and risks
• incident handling standards, methodologies and frameworks
• adversary tactics, techniques, and procedures
• cyber detection and response controls, technologies and best practices
• security operations procedures
• security testing standards, methodologies and frameworks
• Skills in
• leading and facilitating development activities and roadmaps
• vendor management of MSSPs
• preparing reports of analysis and results to provide briefings to management and internal customers
• providing cyber security incident response coordination
• Experience in
• coordinating teams or being a part of a team performing cyber security operations, preferably gained in a similar security operations center area
• developing security event monitoring and detection capabilities
• managing cyber security incidents within complex systems in line with established operational processes, preferably gained in an international multi-site environment