The Cybersecurity Detect Expert within the cybersecurity department is responsible, jointly with the team, to guarantee the detection and operation processes through a continuous monitoring for the security services, in order to detect security anomalies and to run security operations activities in coordination with other teams across Holcim.
RESPONSIBILITIES
- Monitor, conclude and improve security deviations on different IT Services (Public Cloud, MBSS, network…)
- Support, coordinate and improve the Endpoint protection service (specifically on alerts & events, footprint monitoring and incident oversight and escalation management)
- Fine tune the alerts and thresholds defined on the different IT Security Tools.
- Improve and define SIEM use cases, log management policies and sources follow-up, alerts and thresholds, in order to leverage them within real time event monitoring activities or for future exploitation and usage.