Will “Cyber Defense Incident Responder” be Automated?

Core Skills & Abilities

• Conduct investigations of information security breaches to identify vulnerabilities and evaluate the damage.

• Write reports regarding investigations of information security breaches or network evaluations.

• Oversee development of plans to safeguard computer files against accidental or unauthorized modification, destruction, or disclosure or to meet emergency data processing needs.

• Review security assessments for computing environments or check for compliance with cybersecurity standards and regulations.

• Coordinate documentation of computer security or emergency measure policies, procedures, or tests.

• Assess the quality of security controls, using performance indicators.

• Develop or install software, such as firewalls and data encryption programs, to protect sensitive information.

• Recommend information security enhancements to management.

• Troubleshoot security and network problems.

• Oversee performance of risk assessment or execution of system tests to ensure the functioning of data processing activities or security measures.

• Identify security system weaknesses, using penetration tests.

• Identify or implement solutions to information security problems.

• Train staff on, and oversee the use of, information security standards, policies, and best practices.

• Develop or implement software tools to assist in the detection, prevention, and analysis of security threats.

• Provide technical support to computer users for installation and use of security products.

• Coordinate monitoring of networks or systems for security breaches or intrusions.

• Develop response and recovery strategies for security breaches.

• Coordinate vulnerability assessments or analysis of information security systems.

• Develop information security standards and best practices.

• Scan networks, using vulnerability assessment tools to identify vulnerabilities.