Associate Information Security Engineer - Incident Response
About the Employer
Job Description
Post of Associate Information Security Engineer - Incident Response (02 Positions)
Founded in 2006, the Sri Lanka Computer Emergency Readiness Team (Sri Lanka CERT) is Sri Lanka’s National CERT which has the mandate to protect the nation’s cyber space.
Sri Lanka CERT is currently seeking a passionate and committed individual to join its team as Associate Information Security Engineer – Incident Response. This role offers a unique opportunity to contribute to the nation’s one of the premier cybersecurity initiatives.
Job Responsibilities
- Assist in monitoring cyber-security alerts and events across national critical infrastructure.
- sectors to identify potential security incidents.
- Support the investigation and analysis of security incidents to determine scope, impact, and root cause.
- Assist in the execution of response plans to mitigate and remediate national-level cyber security incidents.
- Help conduct threat hunting activities to identify potential cyber-security threats and vulnerabilities affecting national security.
- Analyse cyber-security data from various sources to detect and understand emerging threats.
- Assist in utilizing threat intelligence to enhance national incident detection and response capabilities.
- Support the development, implementation, and maintenance of national incident response plans, playbooks, and procedures.
- Participate in regular testing and updates of incident response plans to reflect the latest threat landscape.
- Support post-incident reviews to identify lessons learned and areas for improvement in national cyber-security.
- Assist in preparing detailed incident reports and briefings for senior officials and stakeholders.
- Help implement corrective actions to prevent recurrence of similar incidents on a national scale.
- Collaborate with national and international cyber-security organizations to share threat intelligence and best practices.
- Assist in acting as a liaison between the national CERT and other government agencies, private sector partners, and international entities.
- Participate in national and international cyber-security exercises and simulations.
- Stay updated with the latest cyber-security threats, trends, and technologies.
- Participate in cyber-security training, conferences, and forums to enhance skills and knowledge.
- Contribute to the continuous improvement of the national CERT’s incident response capabilities. Conduct procurements to procure IT products and systems related to cyber-security.
- Implement national cyber-security projects or activities assigned by Director / CISO or the CEO in line with the cyber-security strategy and action plans.
Educational, Professional and Experience Qualifications
WITH
- One (01) year or above industry experience in the field of information and Cyber security or relevant within a reputed private sector cyber-security service provider, public corporation, statutory board, fully government owned company, or a reputed commercial establishment, after obtaining the first Degree.
Desired
- Cyber-security Certification, preferably Comp TIA Security+, CEH or any other equivalent security certification relevant to the post, recognized by Sri Lanka CERT will be added advantage. Such certifications must be maintained in active status.
Other Skills / Abilities
- Experience in Application Security, Kali Linux tools, Burp Suite, Mobile Application tools.
- Knowledge on the latest theories, standards, and practices on cyber security.
- Writing and speaking in English language.
- Skills in presentations, communication, teamwork.
What We Offer
- Opportunity to contribute to the national cybersecurity infrastructure.
- Hands-on experience with advanced cybersecurity tools and technologies.
- Competitive remuneration and allowances.
- Career development opportunities (local and foreign)
Other General Qualifications
Candidates should fulfil the following general requirements:
- Should be a citizen of Sri Lanka.
- Should be physically and mentally fit to discharge the duties of the post well and to serve in any part of the Island.
- Should be of excellent moral character.
- Age should be not less than 20 years and not more than 30 years.
Salary will be based on current industry standards and includes travel allowances.
If you are confident that you are the ideal candidate for this position, e-mail your resume with a recent photo and two non-related referees to [email protected] within 14 days of this advertisement, stating “Associate Information Security Engineer – Incident Response”. Only shortlisted candidates will be notified.
Note: This job description is not intended to be all-inclusive. Employees may perform other related duties as negotiated to meet the ongoing needs of Sri Lanka CERT.
Chief Executive Officer
Sri Lanka Computer Emergency Readiness Team / Coordination Centre
Room 4-112, BMICH, Baudhaloka Mawatha, Colombo 00700
Tel: 011 2691692 / 011 2679888
