In This Role, You’ll Get to:

• Perform end-to-end handling of all critical, high and medium cyber security incidents at Agoda

• Drafting incident reports & communicating incident summaries to senior leadership, end users, legal teams

• Write playbooks for different types of cyber security incidents and use automation to reduce MTTR time

• Automating repetitive tasks of incident response using automation platforms and/or programming

• Optimizing existing security controls to finetune the alerts & reduce false positives

• Gather open source and commercial threat intelligence and perform hunting across the enterprise for undetected threats

• Support the legal & regulatory teams as a technical SME for cyber incidents with regulatory requirements

• Evaluate new technologies and Driving POCs for new security products
  
  

  What you’ll Need to Succeed:

• 5+ years experience in Cyber Security specifically in Incident Response field and working with 24/7 SOC teams

• Must have strong understand of NIST, CSF, MITRE and other cyber security framework

• Skilled in programming or scripting skills (e.g., Python or C++) are required for automating incident response tasks and developing custom security tools.

• Ability to write and tune detection rules in different security platforms

• Must have hands-on knowledge of dealing with major security incidents

• Ability to automate using automation platforms or programming skills is a must

• Malware analysis experience and digital forensics experience is a plus

• Certification of Cyber Security, Forensic and Incident Response is a plus (CISSP, ECSA, GISP, GCIH, GCFE, GCFA)

• We need you to be flexible, fast moving, adaptable and down-to-earth and an expert in multi-tasking

• Very good communication skills in English (both oral and written)