ABOUT INNOCAP
Innocap is the world’s leading firm of managed account platform services. With over US$70 billion in assets under management, over 425 employees and offices in five countries, we are shaping the future of alternative investments for institutional owners and allocators. Our mission is to revolutionize the asset management industry and to provide customized expert services and an exceptional client experience.
We are seeking forward-thinking individuals to join us on our exciting journey. Innocap's success is built on the diversity of our people and the strength of their ambitions. We empower our teams and foster a culture of inclusivity, collaboration, innovation, and growth. At Innocap, you'll have the opportunity to enhance your career, work on exciting projects, and make a real impact.
ABOUT THE ROLE
As a Senior Associate, Security Operations Center, your primary responsibility is the be first line of defense, responding to cyber security incidents to protect Innocap’ s assets, IT systems, and staff against cybersecurity threats and risks.
You will be called upon to work with several stakeholders to maintain and strengthen Innocap's security posture.
This versatile role will give you the opportunity to work on a wide range of aspects of cybersecurity such as surveillance and vulnerability management. You will also work with colleagues from all levels of the organization.
In a typical week, you will:
- Be responsible for the ongoing monitoring of threats and security issues. Run thorough internal investigations of insider threats.
- Contribute to the documentation of cybersecurity incidents and action plans,
- Perform cyber threat intelligence gathering.
- Analyze what will be identified in vulnerability assessments, penetration tests, then propose strategies to correct them.
- Be the first point of contact for user in the event of a cyber security incident
- Escalating security alerts to other teams such as incident management for further investigation
- Identify the appropriate processes to help prevent and detect cyber-attacks through various means such as awareness, vulnerability management, monitoring, incident response, reporting and standards, etc.
- Work on securing the cloud infrastructure with all stake holders.
- Deliver detailed, constructive and formatted IR reports documenting the detection & response required for internal stakeholders
- Aim to reduce time to Detection / Response / Mitigation
- Research detection rules of newly threats and constantly improve current detection rules of known threats
- Collect threat intelligence from various internal / external, paid / non-profit / open sources
The working hours would need to be discussed to align with Innocap needs. It could include working or on-call duty during the weekends.
- Full-time contract of employment;
- City-center locations close to main railway station and flexible working arrangement;
- Flexible benefits package, including life and medical insurance, health care programs, fitness discount programs, employee assistance program and others;
- Pension scheme;
- Co-founded language courses and other learning opportunities;
- Diverse and inclusive environment.
- Flexibility of hybrid work – only one day a week in the office
PRIMARY QUALIFICATIONS & SKILLS
- Experience in a SOC
- Minimum 4–6 years of experience in information security (authentication, authorization, access control, etc.)
- Microsoft Sentinel, Microsoft Defender for Cloud
- Advanced Hands-on experience with Cyber Security incident management
- Hands-on experience with threat hunting
- Ability to configure Azure security tools to protect data from unauthorized access
- Excellent understanding in all cybersecurity fields.
- Excellent understanding of security and networking devices roles.
- Familiar with SIEM and DLP tools.
- Knowledge of Azure cloud infrastructure.
- Experience in the following activities is an asset: worked in a blue team, worked as Threat Hunter, persistent threat analysis, continuous Monitoring: Log point ,defender & Sentinel
- Certification: GCTI, CISSP, CEH, OSCP, OSCE is an asset.
- Team spirit, good interpersonal and communication skills and focus on customer service.
- English is required as you will be collaborating with partners Worldwide
Please note that the role is hybrid (mix of remote and in-office).