Description
The Senior Security Specialist serves as the first line of defence for security-related communications received by the organisation on the generic security mailbox.
The role performs advanced investigations of security-related communications, drives process improvement initiatives, and serves as a primary escalation point for complex mailbox-related security incidents.
Key Responsibilities
Mailbox Monitoring & Triage
- Continuously monitor Target's primary security mailbox and take necessary actions on incoming emails according to severity.
- Investigate and handle initial escalations from security mailbox incidents and issues.
- Act as a primary coordinator between various stakeholders and the Triage team to handle incidents and issues.
- Review incoming submissions and alerts, allocating or taking action accordingly.
- Prioritise requests based on risk and severity from the generic security mailbox.
- Ensure adherence to response SLAs that vary according to email severity.
- Perform initial screening, categorisation, routing, and deeper investigation of emails in the security mailbox.
Security Analysis
- Analyse phishing submissions.
- Investigate suspicious email activity.
- Perform root cause analysis for serious issues triggered through the mailbox.
- Support and coordinate with stakeholder teams to contain threats.
- Review suspicious links and domains, taking appropriate action.
- Assess suspicious attachments and take action or inform relevant security teams.
- Validate reported security concerns and initiate action.
- Identify indicators of compromise (IOCs) that may affect Target.
- Ensure accurate documentation of serious cases and drive them for closure.
Additional Responsibilities
- Respond to security-related inquiries.
- Educate users on security best practices.
- Provide clear guidance to reporters.
- Maintain professional communication standards.
- Escalate incidents according to severity.
- Coordinate with Cyber Defence teams.
- Engage Incident Response teams when required.
- Ensure critical incidents receive immediate attention.
- Contribute to knowledge articles.
- Identify recurring attack patterns.
- Recommend process improvements.
- Participate in team training activities.
Security Knowledge
- Email security fundamentals.
- Phishing techniques and handling.
- Malware fundamentals and social engineering attacks.
- Analytical thinking and good communication skills with ownership and accountability.
Experience
- 3-4 years of cybersecurity experience.
- Experience in SOC or security operations or security mailbox management for a large organisation.
- Experience handling phishing and security investigations is preferred.
- Worked heavily towards metrics/SOP/KPIs in a large team and focusing on results.
Certifications
- Experience in MS Office 365/Security+/Certified SOC Analyst