北京招聘

· Assisting in preparation of internal and external communications

· Maintaining the chain of custody of incident evidence

· Providing physical security of collected data and devices

· Giving recommendations to resolve an incident, reduce impact of incidents, and to prevent future incidents

Supporting in audits and certifications (ISO/SOC)

Operational

· Assisting in determination of incident severity and in incident response investigations including containment, eradication and remediation activities

· Maintaining documentation throughout a cyber incident

· Assisting in drafting post-incident reports to senior leadership to convey impact, origin, root cause, and remediation

· Collecting, analyzing and distributing Information Security threat information from multiple sources

· Applying structured analytical methodologies to threat monitoring and intelligence analysis

· Developing advanced methodologies to identify threat actor groups and associated tools, techniques and procedure

· Maintaining threat actor profiles and corresponding data on their tactics, techniques and procedures (TTPs)

Responding to research requests from ABB’s security department and ABB’s vendors with timely and accurate assessments

Proactively researching relevant threats and producing reports