Digital Forensics and Incident Response Manager - Director

This job is with Mizuho, an inclusive employer and a member of myGwork – the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. Profile Summary The job holder will be responsible for managing core Incident Response the configuration of information systems with respect to compliance to internal policies and standards; the configuration of information systems with respect to known security vulnerabilities and best practice standards. The role is also required to be a part of wider Cyber Security function to drive the maturity of security monitoring and response practice including establishing/developing forensics capabilities in the team. Duties and Responsibilities Incident Response and Security Monitoring: Analyse, develop and refine security monitoring controls, practices and use-cases to detect anomalies and incidents across the applications and infrastructure estate. Monitor activity upon specified information systems and devices. Identify and report suspicious, improper, malicious or harmful activity. To include regular and ad-hoc reporting. Undertake complex IR investigations into specific threats or security incidents both internal and external. Identification, escalation and reporting of security incidents and breaches. Co-ordination of responses to these breaches, assess the impact and improving the overall Incident Response process. Experience in incident investigation, and analytics of network and host-based artifacts. Experience with IR and Forensics tools, packet inspection tools Security Engagement Relevant experience in working with threat modelling frameworks. Experience in finding, analysing, and extracting attack related payload from packet captures and host forensics images. Experience in a banking, investment banking or investment management environment; Exp in leading the team of DFIR analysts. Experience working with Cyber Security and Incident Response frameworks such as NIST, Kill Chain, Attack life Cycle, Working knowledge over a range of operating systems and platforms including: Windows Server, Windows XP, UNIX (Solaris, Linux), Stratus; Working knowledge of networks: LAN, WAN, routers (Cisco), switches (Cisco), Firewalls, remote access solutions, VPNs; Coordinate with other security functions (SOC, Threat Intelligence and Red/Blue team) Experience in managing and running Threat hunting initiatives including developing Threat intelligence governance framework. In-depth experience with SIEM tools with a strategic oversight on appropriate use case methodologies. Implementation of robust security monitoring use cases and Threat hunting capabilities. Incident Response experience with forensics capabilities. Experience with packet analysis on wireshark or any other network protocol analyser including hands on exp with IR tools. Experience with Advance threat detection, IAM solutions and DLP is preferred. Working knowledge of security products: network based intrusion prevention systems, vulnerability assessment and compliance monitoring solutions, content management tools. Strong knowledge on Vulnerability Management, with proven record of Remediation plans to reduce the threats and risk to Information Assets. Understanding of VMware technology stack. Full understanding of CIS security standards, assessment of the builds to ensure the alignment with CIS benchmarking and working with business to achieve the target state. Knowledge of SSL inspection and encryption methods. Sound knowledge and understanding of information security principles and best practices; In-depth understanding of legislation affecting security, privacy and systems assurance; experiencing working to recognised standards - e.g. NIST, COBIT. GCIA, GCIH, GCFA or equivalent. What Mizuho Can Offer You Here at Mizuho, there are fantastic progression opportunities and clear paths to promotion. We will give you ample opportunity to affect change and to help grow our business. In addition to the great opportunity outlined above we are also currently able to offer: Competitive starting salary, plus discretionary bonus Non-contributory pension 27 days' annual leave Core working hours* Hybrid working - office and home based* Virtual GP Wellbeing benefits, including Mental Health Allies and First Aiders *For applicable roles only At Mizuho, we embrace flexible ways of working when the role permits. We offer different working arrangements like part-time, job-sharing and hybrid (office and home) working. Our purpose-led culture and global infrastructure help us connect, collaborate, and work together in agile ways to meet all our business needs. We are committed to supporting equality and diversity, and seek to create a workplace that is fully inclusive. We welcome applications from all sections of the community that we operate in and from all ethnic backgrounds, sexual orientation, beliefs, gender identities and disabilities If you require more information about our equal opportunities policy or wish to discuss any accessibility requirements or reasonable adjustments please contact the recruitment team - recruitment@mizuhoemea.com and we will be happy to help.