Senior Cyber Security Incident Responder

Senior Cyber Security Incident Responder Information Technology (IT) at Procter & Gamble is where business, innovation and technology integrate to create a competitive advantage for P&G. Our mission is clear -- we deliver IT to help P&G win with the over 5 billion consumers we serve worldwide. Our IT professionals are diverse business leaders who apply IT mastery to deliver game-changing, technology-driven business models and capabilities for our 65 iconic, trusted brands. Job Location MANILA NET PARK OFFICE The Opportunity Procter & Gamble is seeking a highly skilled Senior Cyber Security Incident Responder who can leverage technology, develop, and improve our processes and empower organizations that will enable us to respond to any cybersecurity threats quickly and effectively in the P&G environment. Join a team of professionals motivated by groundbreaking technologies and innovations, serving as a catalyst for change, and identifying and aligning solutions to strengthening P&G''s cyber security. You will report to the Cyber Defense Response Services Director based in Cincinnati, United States which is world HQ of P&G. We are proud to be a highly diverse and technically-adept team with members from different countries, cultures and backgrounds. Your success will be based on operational and project work, which would be reviewed on a quarterly basis. Your manager would provide full-support though continuous mentoring and coaching. Position Responsibilities Lead the analysis, triage, containment, and remediation of serious and major security incidents following P&G’s cyber security incident response plan. Perform deep dive investigations from start to finish of a security incident using data from disparate sources such as SIEM, internal and external threat intelligence, and host and network-based security tools. Provide expert support to stakeholders, especially information security leaders from different organizational units, to resolve cyber security incidents. Collect intrusion artifacts and perform forensically sound collection of images in aid of investigating and resolving cyber security incidents. Document, publish and share after-action learnings, improve awareness, and strengthen our security posture to prevent similar incidents from recurring. Be the escalation point for complex incidents that SOC L1 and L2 analysts are unable to resolve independently. Help in the continuous development, drive awareness of and improve the Cyber Security Response processes and procedures, ensuring timely and effective response to detected cybersecurity incidents. Assist in evaluating SOC’s performance by completing quality reviews on a quarterly basis. Perform basic forensics investigation and fulfill eDiscovery requests in aid of a cybersecurity, legal or HR investigation. Preserve, collect, analyze and present digital evidences from diverse sources to reconstruct events that led to incidents, while adhering to chain of custody rules. Assist the P&G Incident Response Team in investigating and resolving security incidents and continuously mature Digital Forensics processes. Effectively communicate technical information to non-technical audiences and influence others to comply with policies and standards. The Ideal Candidate Is passionate about designing and managing scalable data applications Can work independently and as a team to resolve incidents and develop solutions for the future Has the ability to work cross-functionally across different organizations and geographical locations Is detail-oriented and analytical with strong problem-solving skills Has the ability to operate effectively and calmly in high-stress situations Possesses strong leadership skills with the ability to communicate effectively with key customers including Senior Management Job Qualifications Required Bachelor’s degree or above in software engineering, computer science, information technology, cybersecurity, or related area At least 5 years of experience related to Digital Forensics and Incident Response (DFIR) or Security Operations Center (SOC) Intermediate/advanced knowledge of cybersecurity tools including EDR, SIEM, network proxies and firewalls, and SOAR Experience with forensics tooling (Axiom, EnCase, Wireshark, Cellebrite, etc.) Strong scripting skills (PowerShell, Python, Bash, etc.) Strong expertise with Windows and Linux/Unix system administration Solid understanding of major cloud services providers – AWS, Azure and GCP; foundational certifications are a plus Preferred Industry-recognized certifications such as GCIH, CISSP Awareness of cyber security/privacy incident disclosure requirements across geographies About Us We produce globally recognized brands and grow the best business leaders in the industry. We serve consumers worldwide with a strong portfolio of trusted brands and operate in approximately 70 countries. Visit to know more. We are an equal opportunity employer and value diversity. We do not discriminate based on race, color, gender, age, national origin, religion, sexual orientation, gender identity or expression, marital status, citizenship, disability, HIV/AIDS status, or any other legally protected factor. Job Schedule Full time Job Number R Job Segmentation Experienced Professionals #J-18808-Ljbffr