Cyber Security Incident Response Manager

Shine; Madrid; Híbrido; EUR 90.000 - 150.000; Jornada completa

Descripción de la vacante

Shine is seeking a Cyber Security Manager (Incident Response) to shape and operate our information security and digital resilience. You will own our defensive stack and incident-readiness, reporting to the CISO and collaborating with IT, Risk, and Audit.

In this role, you will design playbooks, manage vendors, and lead tabletop exercises while ensuring regulatory controls and high-availability services across Europe.

Formación

• Hands-on security operations within regulated financial services or fintech.
• Experience deploying EDR/XDR platforms and core defensive tooling.
• Experience with DDoS mitigation and edge security for high-availability services.
• Strong incident response history including playbooks and tabletop exercises.
• Working knowledge of DORA, PCI-DSS, ISO 27001, and MITRE ATT&CK.
• Excellent stakeholder and vendor management with business risk focus.
• Fluent English; German is a strong advantage.

Responsabilidades

• Design, write, and maintain incident response playbooks for key scenarios.
• Ensure DDoS protection for internet-facing and payment services.
• Plan tabletop exercises; capture findings and drive remediation.
• Manage security vendor relationships and contribute to roadmaps and budgets.
• Partner with SOC to map tooling to MITRE ATT&CK and response use cases.
• Provide evidence for PCI-DSS, DORA, and ACPR obligations.
• Report resilience metrics to security leadership.

Conocimientos

Security operations

EDR/XDR platforms

DDoS mitigation

Incident response

DORA knowledge

PCI-DSS knowledge

ISO 27001 knowledge

MITRE ATT&CK

Vendor management

Fluent English

German is a strong advantage

Herramientas

Cloudflare

Akamai

AWS Shield

CrowdStrike

SentinelOne

Microsoft Defender

Descripción del empleo

Shine is seeking a Cyber Security Manager (Incident Response) to shape and operate our information security and digital resilience. You will own our defensive stack and incident-readiness, reporting to the CISO and collaborating with IT, Risk, and Audit.

In this role, you will design playbooks, manage vendors, and lead tabletop exercises while ensuring regulatory controls and high-availability services across Europe.