Cybersecurity Incident Response Lead
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
TL;DR
Cybersecurity Incident Response Lead: Lead end-to-end triage and closure of security incidents for European and Pacific regions with an accent on threat detection, hunting, and response in a hybrid cloud environment. Focus on designing playbooks, conducting forensics analysis, mentoring teams, and implementing strategies to contain and mitigate threats.
Location: London, United Kingdom
Company
Leading entertainment and sports agency with global offices in multiple countries, focusing on client service, innovation, and collaboration.
What you will do
- Serve as executive point of contact during major international security incidents.
- Lead and mentor incident response teams, coordinating with technical and business stakeholders.
- Conduct day-to-day incident response, SOC detection, threat hunting, and forensics analysis (host, cloud, network, memory, logs).
- Design, engineer, and implement runbooks, playbooks, and strategies to contain incidents.
- Monitor threat intelligence, review logs, evaluate threats, and develop monitoring/reporting dashboards.
- Influence global incident response strategy and ensure security controls effectiveness.
Requirements
- 8+ years in IT, with 5+ years hands-on in incident response, threat hunting, or forensics.
- Bachelor’s or master’s degree in relevant field or equivalent experience.
- Expertise in cloud-based incident response and log analysis in hybrid environments.
- Experience developing scripts/tools for investigations and building IR workflows/playbooks.
- Strong background in at least three: identity forensics, Windows/Unix forensics, network traffic analysis, malware analysis.
- Understanding of servers, OS, networks, firewalls, cloud apps; proficiency in NIST framework.
Culture & Benefits
- Collaborative culture with exceptional client service and innovation focus.
- Diverse workforce promoting equal opportunities, diversity, and inclusion.
- Fast-paced environment on the leading edge of technology, including cloud services.
- Zero-tolerance for discrimination, support for applicants with assistance needs.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →