Cyber Security Incident Response Expert

About the role

The Incident Response Expert will act as a Level 3 analyst and subject‑matter expert within client operations, focusing on detection, analysis, investigation and response to security incidents. You will work on long‑term engagements as well as ad‑hoc projects that strengthen client resilience against cyber threats.

Key responsibilities

• Lead technical investigations and coordinate containment and eradication of security incidents.
• Perform threat hunting, breach discovery and forensic analysis on Windows and Linux environments.
• Collaborate with international teams to deliver timely incident response and post‑incident reporting.
• Drive continuous improvement of the Threat Management team’s tradecraft and capabilities.
• Mentor and train junior colleagues, sharing knowledge across the SOC.

Required profile

• Minimum 4 years of professional experience in CERT/CSIRT, SOC or DFIR roles.
• Consistent, reliable and professional attitude, able to work in diverse, international teams.
• Deep understanding of attack vectors, TTPs and Advanced Persistent Threats.
• Strong ability to work under pressure during major incidents and attention to detail in investigations.

Required skills

• Incident response and breach investigation.
• Threat hunting and threat intelligence.
• Forensic analysis of Linux and Windows systems.
• Security monitoring and vulnerability management.