Senior Security Operations Analyst | Mainfreight ITAround town, or around the world, with over 300 branches in our extensive global network, Mainfreight delivers wherever our customer's product needs to go. Balancing speed and cost with road, rail, sea and air transport options, we are in the business of building relationships and helping our customers make their supply chain logistics reliable and efficient.Built from the simple idea of one man in 1978, today Mainfreight is one of New Zealand's most well-known and trusted brands. What makes Mainfreight such a special company is the people in the business! Our culture, values and philosophy - it's all driven by our 10,000 + global team members, steering towards Mainfreight's 100-year vision.WHY MAINFREIGHT?Team member job security during uncertain timesCompetitive industry salaryDiscounted Southern Cross health insurance (opt-in)Overseas work opportunitiesProfessional and personal career development opportunitiesTeam social eventsTHE OPPORTUNITYMainfreight uses many different, exciting technologies in order to assist our business operations in the areas of transport, logistics and international shipping. As such, cyber security plays an incredibly key role within our technology and business.We are looking for an experienced Security Operations operator who is passionate and knowledgeable about security to come onboard and collaborate with a variety of teams across Mainfreight to monitor, detect and respond to security related risks and events which could impact Mainfreight or its customers.Due to our global supply chain operations, you will be exposed to a wide range of IT and OT environments, as well as the opportunity for continued education and professional development. You will be working with industry leading SIEM, EDR, IPS, Vuln, ASM and other security technologies.KEY AREAS OF RESPONSIBILITYThe purpose of the Senior Security Operations Analyst role is to work within Mainfreight's Security Operations (SECOPS) Team, detecting and responding to all security threats and incidents.You will be a valued member of the SECOPS team: investigating and managing incidents, implementing and refining detection/response procedures and technology in order to strengthen Mainfreight's security posture.Responsibilities will cover:Working within our SECOPS (Security Operations and SOC) team. Due to the nature of threats and incidents, you will also work with the wider security and IT teams in addition to Mainfreight's IT support partners/vendors, as well as Mainfreight business teams and customers.Learn and understand Mainfreight's key threats and cater to these via implementation of detection and response methodology.Lead the investigation of security incidents, actual or suspected, to contain and understand the extent of any impact. Manage security incident response plans as an incident commander where required.Ensuring incidents are resolved and documented in a timely manner. Analyse incidents and provide recommendations for security improvements to prevent recurrence.Staying current with security trends and worldwide vulnerabilities and news. Keep informed as to emerging security threats that have the potential to impact Mainfreight and implement/recommend mitigating strategies.Maintaining and improving documentation and standards to meet operational security needs, such as security event logging.Ensuring security operations playbooks/runbooks/processes are created, maintained and improved where needed.Define requirements and exploit security tools to continuously improve the efficiency and effectiveness of threat detection, alerting and response using available tools and systems.Have an influential role in developing the SECOPS team's design and ability to quickly identify, analyse, triage, investigate and respond to cyber incidents and where necessary following forensic management processes.THE TEAM WE'RE AFTERA minimum of 4-5 years of experience within Information Security, specifically in a security operations and vulnerability discovery OR information operations/incident roleExcellent verbal and written communication skills.Strong working knowledge of at least three of the following security tools: SIEM, EDR, host-based antivirus, anti-spam gateway solutions, firewalls, IDS/IPS, server and network device hardening, data loss prevention, forensics software, vulnerability management, website securityExperience in utilising security tools software like Palo Alto Cortex (and Cortex XDR), Sentinel and MS Defender, Tenable.Good knowledge of security attack, defence and monitoring approaches.High level of experience in security incident management logic.Confidence to pushback or challenge when security is at risk.Fast learner, detail oriented, decisive, and enjoys fast paced work environment.Knowledge of cyber risks, the current threat landscape and common attacks used.Technical knowledge of enterprise detection technologies and processes;A solid investigatory mindset, keen eye for anomalies and motivated to dive deeper, ask questions and discover root cause.Ability to own and lead security incident response and improvements in detection and response capabilities.Ability to cope well under high pressure situations.Experience with Windows and Linux OS's, in addition to knowledge of Microsoft and Google clouds.Relevant security certifications are desirable (CISSP, ISACA, SANS GIAC, CompTIA, Vendor Certification) but not essential.ARE YOU THE RIGHT FIT? APPLY NOW!To be considered for this position you must be a New Zealand citizen or resident and you will need to pass a Pre-Employment Background Check and Drug and Alcohol Test and provide evidence of full Covid-19 vaccination.
#J-18808-Ljbffr