Senior CSIRT & Incident Response Analyst

Capgemini; Puerto Bogotá; On-site; COP 90,000,000 - 130,000,000; Full time

Job summary

Capgemini is seeking a seasoned Cybersecurity Analyst to monitor, analyze, and respond to complex incidents across LATAM. The role leads investigations, coordinates with global teams and vendors, and continuously improves detection and response capabilities.

You will develop CSIRT playbooks, conduct digital forensics when required, and communicate risks and trends through technical and executive reports. English proficiency is required to collaborate with international teams.

Qualifications

• 5+ years of experience in Cybersecurity Incident Response or CSIRT environments.
• Experience coordinating response activities with internal and external stakeholders across regions.
• Ability to analyze complex security events and drive remediation.

Responsibilities

• Monitor, analyze, and respond to cybersecurity incidents across LATAM environments.
• Lead the investigation and resolution of critical security incidents.
• Coordinate incident response activities with internal teams, vendors, and external stakeholders.
• Improve detection, response, and threat mitigation processes.
• Develop CSIRT procedures, playbooks, and operational documentation.
• Perform digital forensic investigations and malware analysis when required.
• Collaborate with IT and Security teams to identify vulnerabilities and implement security best practices.
• Prepare technical and executive reports on cybersecurity incidents, risks, and trends.

Skills

Incident response

Security operations

Threat analysis

Coordination

Global teamwork

SIEM

DLP

Malware analysis

Threat intelligence

Education

Bachelor's degree in Systems Engineering/Software Engineering/Computer Science/Information Technology or related field

Tools

SIEM

CTI

DLP

Job description

Capgemini is seeking a seasoned Cybersecurity Analyst to monitor, analyze, and respond to complex incidents across LATAM. The role leads investigations, coordinates with global teams and vendors, and continuously improves detection and response capabilities.

You will develop CSIRT playbooks, conduct digital forensics when required, and communicate risks and trends through technical and executive reports. English proficiency is required to collaborate with international teams.