Cert Analyst

Function: Cyber Security

Work Level: 1C

Reports to: CERT Manager

Location: Bosques

Terms & Conditions: Full time position, hybrid. Have a medium/high level of English.

**ABOUT UNILEVER**

Unilever is the place where you can bring your purpose to life with the work that you do - creating a better business and a better world. You will work on brands that are loved and improve the lives of our consumers and the communities around us. You will lead innovations, big and small, that will make our business win and grow. You will learn from brilliant business leaders and colleagues who provide mentorship and inspiration so that you can become a better you.

Unilever’s Cyber Security organization is a multi-disciplinary team responsible for protecting the Confidentiality, Integrity and Availability of our Information and Operations. Our Cyber Security organization runs a 24x7 Security Operations Centre (SOC), oversees a robust Security Architecture and associated technology landscape, provides Cyber Security Solution Engineering and Risk Advisory to our business, and assesses the security of our vast technology estate, including factories, to name but a few areas. Cyber Security sits as part of the Business Operations organisations, as a peer to Unilever’s Technology and Data functions and the broad Supply Chain agenda. Cyber Security is tasked with elevating, reporting on and influencing enterprise cyber security risk mitigation across Unilever. The Cyber Security function is made up of the Governance, Risk, Assurance, and Compliance (GRAC) team, the Tech & Ops team, the BISO teams, and the Office of the CISO.

**JOB PURPOSE**

To support the organization's cybersecurity incident response efforts by providing deep dive analysis of security alerts / incidents. CERT Analysts play a crucial role in identifying and mitigating cyber threats to protect Unilever's digital assets and data. Their responsibilities include analysis of security incidents, investigating incidents, producing root cause analysis and post incident reviews, forensic analysis, and collaborating with the CERT Manager and other cybersecurity professionals to ensure a resilient and secure digital environment for the organization.

**WHAT WILL YOUR MAIN RESPONSIBILITIES BE***

Unilever is seeking a highly motivated and skilled CERT Analyst to join our Cyber Emergency Response Team. The CERT Analyst will play a critical role in analyzing and responding to cybersecurity incidents to protect our digital assets and ensure the security of our operations globally.
- Review network traffic, logs, and security alerts.
- Identify and analyze security incidents, assessing their severity and impact.
- Document and report security incidents, including findings and actions.
- Stay informed about emerging cybersecurity threats and vulnerabilities.
- Assist in executing incident response procedures and mitigation strategies.
- Collaborate with the CERT team to contain and eradicate cyber threats.
- Utilize cybersecurity tools for incident detection and response.
- Maintain detailed records of incidents and actions taken.
- Ensure compliance with incident documentation standards.
- Participate in training and professional development opportunities.
- Collaborate with team members on incident response efforts.
- Conduct initial triage of security incidents.
- Analyze incidents to determine root causes and potential threats.
- Assist in developing incident reports for management and stakeholders.
- Assist in evaluating and optimizing security tools.
- Stay updated on the latest cybersecurity trends and best practices.
- Support ongoing threat intelligence analysis.
- Work collaboratively in a team-oriented environment.
- Adapt to evolving cybersecurity challenges and technologies.
- Effectively communicate findings both written and verbally.

**Key deliverables include**:

- ** Incident Triage and Analysis**:

- Conduct initial triage of security incidents to assess their severity and potential impact.
- Analyze security incidents to determine their scope, root causes, and potential threats.
- ** Incident Reporting**:

- Document and report security incidents, including the incident timeline, findings, and recommended actions.
- Collaborate with the CERT team to develop incident reports for management and stakeholders.
- ** Forensic** Analysis**:

- Conduct initial forensic analysis through EDR and other “on the fly” tools
- Conduct deep / dead disk forensics and other technical forensic exploitation to support the post incident review process.
- ** Threat Intelligence Analysis**:

- Use threat intelligence to develop root cause analysis and attribution wherever possible.
- Support the Threat Intelligence team by delivering timely IOCs and other useful artifcats to drive intelligence collection work.
- ** Incident Response Support**:

- Assist in the execution of incident response procedures and mitigation strategies.
- Collaborate with team members to conta