Cybersecurity Incident Responder

Brak informacji o wynagrodzeniu

MidZdalnie·WarszawaFull-time

#471830·Dodano 4 dni temu·1

Źródło: justjoin.it

Aplikuj teraz

Tech Stack / Keywords

Incident ResponseEDR/XDREntra IDAzureNIST SP 800-61 or SANS

Podsumowanie oferty

The Cybersecurity Incident Responder will manage security incidents and protect critical systems in a project serving international organizations. The role includes incident response and digital forensics across Microsoft 365, Entra ID, and Azure environments.

Wymagania

5+ years of cybersecurity experience, including 3+ years of hands-on incident response.
Proven end-to-end handling of real incidents, such as ransomware, BEC, account compromise, and data exfiltration.
Hands-on EDR/XDR experience, such as Microsoft Defender for Endpoint, CrowdStrike, or SentinelOne.
Experience with forensic tools and techniques for memory and disk analysis, such as Volatility, KAPE, Velociraptor, or FTK/EnCase, and knowledge of Windows and Linux artifacts.
Experience investigating Microsoft 365, Entra ID, and Azure environments.
Strong knowledge of NIST SP 800-61 or SANS incident handling frameworks.
Readiness for an on-call rotation.
Clean record and readiness for background verification.
English at Upper-Intermediate level or above.

Nice to have:

Certifications: GCIH, GCFA, GCFE, GNFA, or ECIH.
Cloud forensics in AWS or GCP.
Malware triage and basic reverse engineering.
Scripting in Python or PowerShell.
Experience in an MSSP or multi-tenant environment.

Obowiązki

Execute the incident lifecycle: triage, containment, eradication, recovery, and lessons learned.
Perform digital forensics on endpoints, servers, and cloud workloads, including disk, memory, and logs.
Investigate escalated alerts from the SOC and determine the scope and impact of incidents.
Coordinate response activities with affected client organizations, IT teams, and management.
Develop and maintain incident response playbooks and runbooks, and run tabletop exercises.
Write incident reports and root cause analyses, and recommend remediation.

Benefity

Opportunity to earn up to an additional 1,000 EUR per month, depending on expertise, included in the annual bonus for participating in company activities.
Access to the corporate training portal and its knowledge base.
Certification compensation, including for AWS and PMP certifications.
Referral program.
Private health insurance and sports compensation, depending on employment type.
Company events and activities, including parties, pizza days, PlayStation, fruit, coffee, snacks, and movies.

Premie

Spotkania integracyjne

Opieka zdrowotna

Inne informacje

Participate in an on-call rotation, with a response time of 15 minutes and system access within 1 hour.

Andersen

30 aktywnych ofert

Zobacz wszystkie oferty

Aplikuj teraz