Cyber Security Specialist

#Security Incident Management (SIM)

• Handling Security Incidents. This includes investigation, prioritization, routing and escalation of local and global Security Incidents · Security Incident related information dissemination:

• Create action plan for Security Incidents

• Operational Manager SIH is the single point of contact for the management.

• Conducts lessons learned for Security Incidents with high priority.

• Manage phases of SIM - · Detect · Triage · Response

• Triggering the Response Activities (if possible by an Incident ticket) · Coordination of Response Activities · Explanation of gathered information (follow-up on questions) · Preparation of documentation · Collection of evidence · Checking that mitigation, recovery and fix are sufficient (at least for high priority Security Incidents)

• · Information and notification of affected parties via defined communication channels · Hand over Information to the Info-Manager (if helpful) ·

• Coordination of all tasks to handle the global/Regional Security Incident especially between the local Application responsibilities

#Vulnerability management

• Shall be conversant with scanning tools like Nessus and Thor.

• Vulnerability Alerting and forwards this information to the responsible parties within BMW to perform steps. (RBS-Risk based security Feeds and Vendor Specific Alerting)

• Support Vulnerability Scanning, Alerting, SIHP, etc.

# Security Architecture support for software development

• Advises the software products to design the security system and advices on appropriate components to add.

• Support and advice on the results of Pen Testing, Host Assessement, Code Check, Threat Modelling, System hardening, ITSN Conformity,

• Support on the eGRC Requirements, like PIA, ICL,

#Cloud Security Specialist (AWS