SEC504: Hacker Tools, Techniques, and Incident Handling

Responsible for establishing vision and direction for an organization's cybersecurity operations and resources and their impact on digital and physical spaces. Possesses authority to make and execute decisions that impact an organization broadly, including policy approval and stakeholder engagement.
Collaborates to identify access and collection gaps using cyber resources and techniques to penetrate target networks and support mission operations.
Investigates cybercrimes, analyzing digital media and logs to establish documentary or physical evidence in support of cyber intrusion cases.
Conducts host system analysis using built-in tools, evaluating services, permissions, and configurations to detect and address system threats.
Acquires and manages resources, supports, and performs key industrial security protection while adhering to safety and engineering goals.
Ensures control system network security compliance and best practises for control networks.
Executes specific industrial incident response for incidents that threaten or impact control system networks and assets, while maintaining the safety and reliability of operations.
Builds and maintains business relationships with engineering staff and C-suite stakeholders by communicating and managing cyber-to- physical risks while reducing security risk to engineering operations and simultaneously prioritising safety.
Responsible for investigating, analyzing, and responding to network cybersecurity incidents.
This dynamic and fast-paced role involves identifying, mitigating, and eradicating attackers while their operations are still unfolding.