Cyber Incident Response Specialist

TN United Kingdom; United Kingdom; On-site; GBP 40,000 - 80,000; Full time

Job summary

An established industry player seeks a CIRT Analyst to bolster its cyber defense capabilities. In this role, you will manage incident response processes, conduct forensic investigations, and collaborate with various teams to mitigate security threats. You will engage with cutting-edge technologies and contribute to a dynamic environment focused on safeguarding critical assets. If you have a passion for cybersecurity and a knack for problem-solving, this position offers an exciting opportunity to make a significant impact in the field.

Qualifications

• Hands-on experience in incident response or similar roles.
• Knowledge of operating systems and networking.

Responsibilities

• Manage Cyber Security Incident Management process.
• Conduct forensic investigations for incidents.
• Facilitate communication with security teams and stakeholders.

Skills

Incident Response

Forensic Analysis

Cyber Security Knowledge

Analytical Skills

Communication Skills

Problem Solving

Education

Bachelor's in IT/Computer Science

Tools

Windows

Unix/Linux

TCP/IP Networking

Python Scripting

Vulnerability Management Tools

Job description

Social network you want to login/join with:

col-narrow-left

Client:

Euroclear

Location:

Job Category:

Other

-

EU work permit required:

Yes

col-narrow-right

Job Reference:

2561a0ac533a

Job Views:

4

Posted:

29.04.2025

Expiry Date:

13.06.2025

col-wide

Job Description:

Division: CISO

Cyber Defense Center (CDC) is part of the Chief Information Security Officer Office. The main responsibility of the team is to reduce the risk of Euroclear cyber threat surface by supervising for malicious intent targeted at Euroclear’s services, its supporting assets, and people. We do this through the Security Operations Centre (SOC), Cyber Incident & Response Team (CIRT), Detection & Response Engineering Team (D&R Eng), and Cyber Threat Management (CTM) capabilities. This includes security incident and event monitoring, cyber analytics, incident management and forensic analysis, cyber threat intelligence, vulnerability management, penetration testing, brand, and digital footprint monitoring!

The CDC supports capabilities within the security domain and acts as authority across all divisions in the company as well as interacts with external collaborators, including customers, oversight bodies, threat intelligence providers, and third parties.

CIRT establishes and performs the security incident response framework to ensure a consistent and effective approach to security incident management. Performs in-depth incident reviews, impact assessments, root-cause analysis and handle collaborator engagement. Performs forensic analysis/investigations and supports Fraud and Personnel related incident investigations.

Role

In your role as CIRT Analyst you support the incident response capabilities and forensic technologies, understand potential security incident impact on complex corporate environments and assess and support incident remediation to a conclusion. Assist reporting and collaborator management activities.

Your primary duties will be:

• Manage the Cyber Security Incident Management process, ensuring swift mitigation and escalating to the relevant incident resolution team leaders. Perform advanced incident handling, including remediation, in partnership with the IT resolution team.
• Facilitate the organization's security incident management, coordinating and communicating with the broader security team, business units, IT, and external partners as needed.
• Conduct and support forensic investigations for suspected or confirmed incidents, following company policies.
• Provide assistance in analyzing malicious documents/malware to proactively prevent threats.
• Take charge of incidents and steer their resolution.
• Aid in mitigating security incidents and escalate to the appropriate resolution teams and leaders when necessary.
• Aid in managing incidents, encompassing containment, analysis, remediation, and reporting, as well as communication with stakeholders.
• Guarantee the integrity of digital evidence during investigations and raise any exceptions to more experienced colleagues.
• Employ various technical abilities to create a comprehensive narrative from the circumstantial evidence of an incident or case.
• Independently conduct investigations within the established procedural framework.
• Review and report any deviations from incident

Technical skills

• You are interested in the modern cyber security landscape
• You have an IT / Computer Science degree (Bachelor,
• Hands-on experience in incident response or in a similar role such as Threat Analyst or SOC analyst
• Knowledge of operating Systems : Windows, Unix/Linux
• Knowledge of networking (TCP/IP)

Assets

• Certifications GIAC Certified Incident Handler (GCIH), Forensic Analyst (GCFA), Forensic Examiner (GCFE), GIAC Reverse Engineering Malware (GREM) or other equivalent technical certifications;
• Knowledge of following technologies and processes: firewalls, IDS, proxy, WAF, Active Directory, antivirus, patch management...
• Knowledge in Python Scripting
• Experience with vulnerability management & threat management, vulnerability scanning, Data Loss Prevention (tools and processes)
• Knowledge of IDA or other decompilation tools
• Good security mind set
• Eager to work with exciting and technical concepts; self-learning ability (you’re ready to dive into new technologies and extend your own expertise)
• Good analytical skills
• Flexible and pragmatic, open-minded
• A good communicator orally and in writing
• A good teammate
• A problem solver (you recognize underlying issues and problems; you analyze root causes and define solutions accordingly)
• Accurate, acting with attention to details
• At ease in a constantly evolving environment
• Can express well-founded opinions and positions and understanding their consequences (judgement)
• Ability to quickly adapt to an international and diverse company