Cyber Resilience and Intelligence Specialist

Purpose

As a Cyber Resilience and Intelligence Specialist you will be placed in the Cybersecurity and Information Security Division and will be responsible for supporting the Cyber Resilience & Intelligence services, including SOC Operations, Detection Engineering, Incident Response, Threat Intelligence & Threat Hunting. 
You will play a key role in cybersecurity operations, initiatives and projects, helping shape the next generation of cybersecurity and resilience capabilities at Alpha Bank in a continuously evolving threat landscape.

What you will be doing

•    Act as a Subject Matter Expert in at least one of the following areas while supporting and contributing across the broader Cyber Resilience & Intelligence domain:
o    Detection Engineering & SIEM Operations
o    SOC Operations 
o    Threat Intelligence & Threat Hunting
o    Incident Response & Digital Forensics
•    Perform investigation and triage of security events and incidents received from internal teams, 3rd party security providers and security platforms, while supporting containment and incident response activities.
•    Implement, maintain and continuously improve detection use cases, analytics rules and correlation logic across security monitoring platforms to improve detection quality and increase operational effectiveness.
•    Develop and maintain automation workflows, integrations and playbooks to improve operational efficiency and reduce manual workload.
•    Support the onboarding, integration and operationalization of new cybersecurity technologies and log sources.
•    Contribute to the development of security monitoring use cases for emerging attack techniques and threats relevant to the Bank.
•    Collaborate closely with other teams to improve visibility, detection coverage and incident response efforts.

What you need to have

•    A Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Computer Engineering or a related field
•    A Master’s degree in a related field (preferred)
•    A minimum of three (3) years of experience in a technical cyber security role
•    Strong understanding of cybersecurity principles, defensive controls and common attack techniques
•    Hands-on experience with SIEM platforms, preferably Microsoft Sentinel, including log source onboarding, detection rule development, tuning and security monitoring use cases
•    Experience in SOC Operations, including the investigation and triage of security events and incidents.
•    Ability to apply Threat Intelligence to investigations, hunting or detection activities
•    Automation, KQL and scripting skills will be considered an asset.
•    Familiarity with Microsoft security technologies (preferred)
•    Familiarity with emerging technologies such as Artificial Intelligence (AI) (preferred)
•    Relevant cybersecurity certifications such as GCIH, GCFA, GCTI, Microsoft Security certifications or equivalent will be considered an asset
•    Clear and influential communication
•    Complex problem-solving and sound judgement.