Cyber Incident Handling Specialist

About the role

Devoteam, a European consultancy focused on digital strategy, technology platforms, cybersecurity and business transformation, is looking for a specialist to handle and respond to cyber security incidents. The role covers first triage, analysis, notification and escalation, containment, eradication and recovery, and contributes to the Global Cyber Respond Team's cyber readiness programme.

Key responsibilities

• Analyse, manage and investigate cyber incidents and respond to them with a comprehensive, coordinated approach
• Carry out first triage, analyse incidents and determine their impact, then notify and escalate according to impact
• Take part in containment, eradication and recovery of major incidents and document every step of the incident response process
• Develop post-mortem analyses of systems and networks and manage complex incidents globally across the group
• Orchestrate human and technical resources for high-impact incidents and design the approach to the aftermath of a breach to limit damage and recovery time
• Drive continuous improvement of cyber response capability through the cyber readiness programme and review and coordinate incident response plans, policies and procedures
• Take part in cyber exercises such as live tabletop simulations, technical simulations (Cyber Ranges) and skills labs on orchestration tools and threat intelligence platforms
• Prepare incident reports and minutes for senior management, contribute to a global community of Cyber Threat Units, and collaborate with stakeholders such as Global Forensics, the Security Operations Centre and Corporate Security & Intelligence
• Be available 24x7 in 8-hour shifts and on-call duty

Required profile

• 1+ years of experience in cybersecurity, including a CIRT, CSIRT or similar response team
• Degree in computer science, engineering or similar
• High level of English
• Experience in the financial/banking industry is recommended

Required skills

• Incident response and handling methodologies (experienced level)
• Cyber incident categories, response timelines, cyber defence procedures and regulations
• Knowledge of attack stages (reconnaissance, scanning, enumeration, access, privilege escalation, exploitation, cover tracks) and risk management
• One or more of CISSP, CISA, CISM, CEH, OSCP, GCIH is desirable