Cyber Incident Response Manager
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
TL;DR
Cyber Incident Response Manager (Cybersecurity): Strengthen and scale end-to-end incident response lifecycle across cloud and corporate IT environments with an accent on detection engineering, runbooks, and security operations capabilities. Focus on leading response coordination, automating detection logic and remediation workflows, and driving continuous improvements in metrics and threat intelligence.
Location: Home office friendly anywhere in Argentina
Company
World’s leading tech platform for culture and live entertainment, inspiring over 300 million people monthly in +55 countries.
What you will do
- Assess current incident response posture, conduct maturity assessments, and identify gaps in processes and runbooks.
- Build prioritized action plans, operate scalable IR processes, and deliver improved detection logic and automation.
- Design, update, and maintain IR playbooks tailored to cloud and corporate IT.
- Lead response coordination during incidents, ensuring rapid containment, eradication, and recovery.
- Enhance monitoring with threat intelligence, manage a specialized IR team, and conduct training and simulations.
- Continuously improve IR metrics, KPIs, dashboards, and reporting.
Requirements
- Fluent in English (written and spoken)
- 5+ years in cybersecurity, with 2–3 years leading incident response processes
- Strong understanding of SOAR, cloud-native detection, EDR (e.g., CrowdStrike), SIEM, and automation
- Skilled in analyzing security telemetry using Python, AWS Athena, Google BigQuery
- Hands-on experience responding to cloud incidents and designing IR runbooks/playbooks
- Analytical mindset, strong problem-solving, and excellent communication skills
Nice to have
- Bachelor's or Master’s in Computer Science, Information Security, or equivalent
- Certifications like GCIH, GCIA, GCFA, GEIR, AWS Security Specialty
Culture & Benefits
- "Relación de dependencia" contract with attractive base salary, variable bonus, and stock options
- 40% discount on events, Osde 410 medical insurance, Gympass, English lessons
- Home office friendly anywhere in Argentina, responsibility from day one
- Great work environment with young, international team and professional growth opportunities
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →