TDI – Information Security Specialist – AVP

at  Deutsche Bank

POSITION OVERVIEW

Details of the Division and Team :
The Global Threat Detection & Response (TDR) team operates 24x7x365 in a follow-the-sun model with distributed teams across 3 regions (APAC, EMEA and AMER). The team is responsible for enabling the business of Deutsche Bank by providing agile, cost-effective and cutting edge threat response services to protect Deutsche Bank’s data, assets, customers and partners.
This Threat Response (TR) Analyst role is part of the APAC TDR team, and requires a heavy focus on all areas of security monitoring, threat assessment and incident response, requiring a minimum 5 years of cyber experience.

YOUR SKILLS AND EXPERIENCE:

• Minimum 5 years cyber security working experience in security operations, incident response, threat assessment etc, with at least 2 years working in an enterprise-grade security operations center (SOC).
• Working experience in network protocols, monitoring of logs and analysis, XDR, cloud infrastructure, and security controls in investigation and threats containment.
• Working experience investigating cloud security alerts and understanding of cloud infrastructure and operations
• Working experience in security tools such as SIEM, SOAR, XDR, and Cloud-based IR tools.
• Experience in blue/red/purple team techniques, adversary tactics, techniques, and procedures (TTPs), and cyber kill-chain.
• Analytical and critical thinking with an inquisitive mindset, collaboration, and conflict management with good communication skills.

ABOUT US AND OUR TEAMS:

Deutsche Bank is the leading German bank with strong European roots and a global network. Click click here to see what we do.

The Threat Response Analyst supports the Global Security Operations Center from the APAC region. The SOC operates 24x7x365 in a follow-the-sun mode with distributed teams across APAC, EMEA and AMER.
Responsible for monitoring and investigating alerts and events escalated from SIEM or other security channels. This role involves conducting in-depth log analysis, correlating IOCs, and implementing threat containment measures when necessary. Mitigate security risks and threats relating to cloud-based systems, applications, and data. This includes working closely with cross-functional teams to enhance our cloud security posture. The incumbent also assumes responsibility for overseeing and coordinating all facets of incident management like initial evaluation, stakeholder management, technical triage, and incident resolution. Proactively search and identify patterns of compromise, emerging threats, evidence of breach and anomalies by analysing historical data. Responsible for leading and coordinating operations and processes that are necessary for the smooth management of the security operations center Involved in managing various projects like detection use cases, security automation (SOAR), and threat hunting. The overarching goal is to enhance efficacy and proactively detect adversaries and malicious activities.