Security Incident Response Expert

Job purpose

• Digital Forensics and Incident Response (DFIR) activities including assessment, analysis, categorization, classification, and investigation of cybersecurity incidents
• Manage cybersecurity incidents to ensure timely containment and risk mitigation engaging with operational teams and leadership as required and according to Security Incident Management Processes
• Handle potential high severity incidents autonomously during non-working hours (on rotational on-call basis)
• Collect, document and analyze evidence as part of the digital forensics capability of CyberDefense and AXA CERT
• Follow-up security incidents resolution and track updates in ticketing tool
• Notify and communicate to relevant stakeholders including Group and entity CISO / CSO’s
• Support SOC Security Analysts and an international network of local security incident handlers from AXA entities
• Perform lessons learned activities, e.g. security incident reviews, post mortem documentation
• Contribute to the improvement of the DFIR capability including development and integration of open source and commercial tools in a dedicated forensic lab
• Contribute to threat hunting activity proactively and in the context of high severity incidents
• Participate in use case development and SIEM rules threshold tuning
• Act as a mentor to more junior Security Incident Response Specialists, support and supervise them, ensure knowledge transfer within the team
• Professional communications and reporting to SOC stakeholders and customers
• Participate in exchanges with national and international CERT / CSIRT communities

Qualifications

Education

Certification

Overall work experience in the field

4 years

3 years

2 years

1 years

3 years

Technical Skills / abilities

Personal Skills / abilities