The Threat Analysis and DFIR Section Head will lead a team responsible for developing, analyzing, and coordinating cyber threat intelligence, he/she will lead the team in conducting thorough digital forensic investigations and incident response activities to mitigate cybersecurity incidents effectively. he/she will also oversee malware analysis efforts to understand and counteract sophisticated threats. As a leader in the field, he/she will play a critical role in guiding the team toward effective threat mitigation strategies and ensuring the organization's cybersecurity posture remains resilient in the face of evolving threats.

Job Duties:

Lead digital forensic investigations and incident response efforts, ensuring timely identification, containment, eradication, and recovery from cyber incidents.

Monitor and analyze digital evidence and network traffic for security incidents, leveraging honeypots to detect and study malicious activities and intrusions, enhancing our understanding of emerging threats and attack vectors.

Manage the identification and analysis of threat actors and tactics, coordinating team efforts to uncover sophisticated attack methodologies and provide actionable insights for proactive threat mitigation.

Plan and deploy digital forensic tools and resources, optimizing their utilization for efficient and accurate analysis. Additionally, oversee the digital forensic toolkit to address evolving cyber threats.

Lead the creation and implementation of detailed incident response plans, collaborating across teams to refine strategies and ensure swift, effective responses to cyber incidents, increasing organizational resilience.

Managing honeypots to gather threat intelligence, ensuring their deployment and maintenance. Utilize honeypot data to enhance understanding of emerging threats and adversary tactics.

Oversee the collection and analysis of threat intelligence from various sources, collaborating to enhance organizational resilience against cyber threats.

Generate timely incident reports and threat assessments, providing actionable insights to stakeholders and contributing to proactive defense strategies.

Manage a team of analysts specializing in advanced malware analysis to identify, mitigate, and respond to malicious software threats effectively.

Collaborate with cross-functional teams for incident response coordination, fostering a cohesive and proactive approach to cybersecurity.