Position Overview & Specifications
Pick a point on a globe, and Maersk won’t be far away. With 90% of global trade carried by sea, there is a fairly high chance that the shoes on your feet or the phone in your pocket travelled to you on a Maersk vessel. Would you like to impact the daily lives of people in every corner of the world? Then keep reading.
The Role:
You will be a member of the world’s largest logistics company’s Security Operations Centre 24/7 service. You will be providing Maersk with round the clock security monitoring, using an impressive suite of security tools. You will be responsible for carrying out L2 triage on alerts and will be a key member of the incident response team. Acting as the first point of call for all cyber security related issues for Maersk and its subsidiaries, you will be giving security advice to the wider IT community within the business
Working with internal and external stakeholders you will be responsible for:
- Protective Monitoring
- Investigative Analysis
- Threat Hunting
- Incident Response
- Continuous Improvement
- Significant experience of incident response
- Experience operating within a large-scale enterprise network
- The ability to manage conflicting priorities
- Sound critical reasoning and problem-solving skills
- Excellent written and verbal communication skills to work with both technical and non-technical stakeholders
- Strong working knowledge and thorough understanding of Protective Monitoring, Vulnerability Monitoring, Threat Intelligence and Threat Hunting
- Knowledge and understanding of a wide variety of security technologies and processes
- Up-to-date knowledge of current exploit techniques, vulnerability disclosures, data breach incidents, and security analysis techniques, combined with the understanding of the potential impact on the security posture
- Technical understanding and hands on approach with a wide range of Cyber Security related toolsets
- Carrying out key incident management activities, including creating effective incident timelines and assisting with response activities.
- Creating hypothesis for threat hunts and using the tooling to carry out those hunts
- Working within a team environment in the development, planning and coordination of new and existing aspects of the Incident Response Team, such as creating Incident Response Playbooks.
- Assist in the development of security tools including new playbooks for the SOAR tool.
- Generating requirements for the fine tuning of SIEM rules.
- Have direct input into the Cyber Security Incident Response Team (CSIRT) process.
- In coordination with the Cyber Security team and other structures, be able to respond to the CSIRT and associated emergency preparedness procedures.