Cyber Defense & Incident Response Specialist

Sun Life Financial; Ireland; On-site; EUR 40,000 - 54,000; Full time

Job summary

Sun Life is seeking a Cyber Security Analyst to conduct triage of alerts, gather evidence from SIEM/EDR and cloud sources, and support incident response across the organization. The role involves documenting investigations, escalating risks, and contributing to playbook improvements.

The ideal candidate will have foundational cyber security skills, knowledge of SIEM/EDR, and a willingness to learn. This position may involve on-call duties and collaboration with IT teams in Ireland.

Qualifications

• Foundational understanding of cyber security operations, investigations and incident response.

Responsibilities

• Conduct initial triage and investigation of cyber security alerts using playbooks and escalation paths.
• Gather, preserve, and document evidence from security tools, logs, endpoints, identity systems, cloud platforms, and network sources.
• Assess evidence to determine scope, severity, and impact; escalate uncertainty or material risk.
• Maintain case notes, timelines, investigation records, and action trackers for review.
• Support incident response, Major Incident Management, control validation, audit, and post-incident activities.
• Identify recurring alert patterns and opportunities to improve playbooks, detection quality, automation, and team practices.
• Participate in training, tabletop exercises, and on-call coverage as required.

Skills

Cyber security operations

Incident response

Threat analysis

SIEM

EDR

IDS/IPS

Education

Degree in Computer Science / Cyber Security

Security+ or GISF (asset)

Tools

Identity platforms

Cloud logging

Networking basics

Job description

Sun Life is seeking a Cyber Security Analyst to conduct triage of alerts, gather evidence from SIEM/EDR and cloud sources, and support incident response across the organization. The role involves documenting investigations, escalating risks, and contributing to playbook improvements.

The ideal candidate will have foundational cyber security skills, knowledge of SIEM/EDR, and a willingness to learn. This position may involve on-call duties and collaboration with IT teams in Ireland.