ABOUT INNOCAP
Innocap is the world’s leading firm of managed account platform services. With over US$70 billion in assets under management, over 425 employees and offices in five countries, we are shaping the future of alternative investments for institutional owners and allocators. Our mission is to revolutionize the asset management industry and to provide customized expert services and an exceptional client experience.
We are seeking forward-thinking individuals to join us on our exciting journey. Innocap's success is built on the diversity of our people and the strength of their ambitions. We empower our teams and foster a culture of inclusivity, collaboration, innovation, and growth. At Innocap, you'll have the opportunity to enhance your career, work on exciting projects, and make a real impact.
ABOUT THE ROLE
As a SOC Tech Lead at Innocap, your primary role will be to manage and orchestrate the investigation and resolution of cyber incidents. You will be responsible for analyzing and investigating evidence, gathering digital evidence for analysis, and deploying tools for analysis and investigation.
- Lead the SOC team and manage computer forensic investigations and cyber incident response, including log analysis, malware triage, and binary reverse engineering.
- Demonstrate in-depth technical knowledge in the areas of operating system security, network security, cryptography, and malware analysis.
- Perform computer forensics analysis on various platforms.
- Write technical reports based on findings and, if required, give evidence in court as an expert witness
- Process the threat intelligence information related to fund management entities and assessing the impact of intelligence on Innocap
- Demonstrate mastery of the Azure security stack including Azure Sentinel and other related security tools and services.
- Continuously monitor and improve security monitoring tools and processes to ensure the effectiveness of threat detection and response.
- Disseminate threat intelligence information across the enterprise at various levels - operational, management and strategic.
- Communicate effectively at various levels and audiences and coordinate with other teams such as HR, Legal to aid with security forensics
The working hours would need to be discussed to align with Innocap needs.
- Full-time contract of employment;
- City-center locations close to main railway station and flexible working arrangement;
- Flexible benefits package, including life and medical insurance, health care programs, fitness discount programs, employee assistance program and others;
- Pension scheme;
- Co-founded language courses and other learning opportunities;
- Diverse and inclusive environment;
- Flexibility of hybrid work – only one day a week in the office.
PRIMARY QUALIFICATIONS & SKILLS
- Undergraduate degree in Computer Science, Information Technology, or a related field - or equivalent in academics and/or experience.
- A minimum of 7 (seven) years of prior experience in incident response or CSIRT is preferred.
- Practical experience in computer forensics such as Windows, Unix, and/or Linux disk and memory forensics, host and network-based security monitoring, traffic and log analysis, and preferably static and dynamic malware analysis in support of incident response investigations.
- Experience with SOC practice management
- Advanced Hands-on experience with building Cyber security SIEM use-cases
- Advanced Hands-on experience with threat hunting
- Hands-on experience with Cyber Security Forensics
- Completion of relevant certifications such as GIAC Certified Incident Handler (GCIH), GIAC Certified Forensic Examiner (GCFE), EnCase Certified Examiner (EnCE), CCFP ISC(2), or similar.
- Hands-on experience with various security tools, including log management, web proxies, endpoint protection platforms, etc., is preferred.
- Excellent understanding in offensive cybersecurity
- Strong leadership, previous experience as a Tech Lead is preferred.
- English is required as you will be collaborating with partners Worldwide
Please note that the role is hybrid (mix of remote and in-office).