Defensive Security Analyst: Investigations & Incident Response

sunlife; Waterford; On-site; EUR 40,000 - 54,000; Full time

Job summary

Sun Life is seeking a Defensive Security Specialist to support cyber security investigations, alert triage, evidence gathering, and incident response within the SRC function. You will build technical capability, learn enterprise risk, and operate under established procedures with guidance from senior analysts.

Key activities include triage of alerts, gathering evidence from tools and platforms, determining scope and impact, maintaining detailed case notes, and supporting post-incident work.

Qualifications

• Foundational understanding of cyber security operations, investigations, incident response, threat analysis, or related support work.
• Basic knowledge of SIEM, EDR, IDS/IPS, enterprise networking and cloud logging.
• Understanding incident response lifecycle and evidence handling best practices.
• Clear written and verbal communication with strong attention to detail.
• Willingness to learn and participate in training and on-call duties.

Responsibilities

• Conduct initial triage and investigation of cyber security alerts using established procedures and playbooks.
• Gather, preserve, and document evidence from security tools, endpoints, logs and cloud platforms.
• Assess evidence to determine scope, severity and impact, escalate as needed.
• Maintain case notes, timelines and evidence suitable for operational review.
• Support incident response, audit, and post-incident activities under guidance.
• Identify patterns and gaps to improve playbooks and detection quality.
• Participate in training, exercises, and on-call duties as required.

Skills

Cyber security operations

Incident response

Evidence handling

Written and verbal communication

Attention to detail

Willingness to learn

Education

Degree in Computer Science

Cyber security training

Tools

SIEM

EDR

IDS/IPS

Cloud platforms

Identity systems

Job description

Sun Life is seeking a Defensive Security Specialist to support cyber security investigations, alert triage, evidence gathering, and incident response within the SRC function. You will build technical capability, learn enterprise risk, and operate under established procedures with guidance from senior analysts.

Key activities include triage of alerts, gathering evidence from tools and platforms, determining scope and impact, maintaining detailed case notes, and supporting post-incident work.