A Level 3 – Incident Response participates in a 24/7 operation that supports monitoring and is directly responsible for responding to security events. He provides a technical escalation point during Security Incidents, establishing extent of threat, business impacts and then advising and performing the most suitable course of action to contain and remedy the incident. A Level 3 Specialist maintains a good knowledge of the threat landscape, helps enhance current techniques and provides support in the identification of new methods of detecting threats. He performs detailed analysis of security events, using analytical skills and advanced knowledge of IT security and network threats. Expect to have basic cloud knowledge, working with API’s, Basic and Hands\-on experience on Akamai cloud platform.
100%
PART 3
Duties and Responsibilities
List in order of importance and state approximate weightage accorded to each.
- Alert handling: Analyze and tune security alerts and interpret security events which may led to incidents
- Incident Response activities: Identify, investigate and respond to potential security incidents in order to minimize the operational and organizational impact
- Policy fine\-tuning and maintain the current policies: Actively pursue abnormal activity on assets and new attack trends and fine tune the policies accordingly in order to tighten the security.
30
- Threat Intelligence: Leverage various threat intelligence sources and capabilities to enable intelligence driven response
- Application Onboarding : Onboard applications based on the customer requirement and ensure business continuity and service availability
20
- API: knowledge in API’s.
- Experience with cloud WAF would be an advantage. Like Akamai, Imperva.
- Knowledge in Scripting. Like Python, Shell, etc.
- Knowledge in terraform or any automation software would be an added advantage.
20
- Forensics: Perform forensic analysis on memory, disk, and other system and network artifacts to identify indicators of compromise.
- Identify Gaps: Investigate and document gaps in controls, event data, and work with internal teams to resolve
- Process Improvement: Execute, develop and document Incident Handling Guides and processes.
10
PART 4
Qualification, Experience, Technical and Functional Skills
At least 7\-9 years of experience handling Network Security , Incident Response , knowledge and Hands on experience on WAF or any Reverse proxy Layer 7 security appliance. Other skill sets include;
- OWASP top 10
- Knowledge of networking protocols such as HTTP, SSL, FTP, DNS etc. and good idea about OSI layer and packet flow
- Knowledge of Syslog and SNMP monitoring tools
- Basic Linux knowledge
- Basic knowledge in cloud technologies
- ITIL knowledge and service management skills would be a plus
- Basic understanding and Knowledge on Automation tools and software.
PART 5
Key Competencies
- Incident Response to WAF events
- Mitigation of violations and attacks
- Policy fine\-tuning
- ITIL
- Developing WAF incident response plans
- Develop, maintain, test and troubleshoot WAF appliance as well as ruleset
- Onboarding an existing application to the WAF
- Frequent review of the WAF statistics and attack trend with the customers
Allianz Group is one of the most trusted insurance and asset management companies in the world. Caring for our employees, their ambitions, dreams and challenges is what makes us a unique employer. We are united by a shared commitment: to put our customers first and at the center of everything we do. Their needs inspire our thinking and guide our actions. Together, we can build an environment where everyone feels empowered and confident to explore, grow and shape a better future – for our customers and for the world around us.
- *At Allianz, we stand for unity:** we believe that a united world is a more prosperous world, and we are dedicated to consistently advocating for equal opportunities for all. The foundation for this is our inclusive workplace, where people and performance both matter, and where integrity, fairness, inclusion and trust are at the heart of our culture. We therefore welcome applications regardless of race, ethnicity or cultural background, age, gender, nationality, religion, social class, disability or sexual orientation, or any other characteristics protected under applicable local laws and regulations.
Join us.Let's care for tomorrow.
- *Note:** Having different strengths, experiences, perspectives and approaches is an integral part of Allianz‘ company culture. One means to achieve this is a regular rotation of Allianz employees across functions, Allianz entities and geographies. Therefore, Allianz expects from its employees a general openness and a high motivation to regularly change positions and collect experiences across Allianz Group.