Cybersecurity Incident Response Specialist

Amgen SA; Lisboa; Híbrido; EUR 60 000 - 95 000; Tempo integral

Resumo da oferta

Amgen Capability Center Portugal, based in Lisbon, is seeking an Incident Response Specialist Cybersecurity Ops Analyst to join a global security team and help protect the enterprise from cyber threats.

You will drive detection, containment, eradication, and recovery of incidents, develop SOPs and playbooks, and collaborate with teams across Threat Intelligence, Cloud Security, and Endpoint Security to strengthen defenses.

Qualificações

• 5 years of directly related incident response experience.
• Experience supporting a multinational organization.
• Familiarity with Agile methodologies.
• Excellent written and verbal communication skills across diverse audiences.
• Practical DFIR experience across Host/Network/Cloud/OT environments.
• Knowledge of security tools like CrowdStrike, QRadar, Encase, Office 365 Security.

Responsabilidades

• Execute all phases of the incident response lifecycle per standards and frameworks.
• Conduct investigations across endpoints, networks, cloud, and identity-based incidents.
• Analyze security events from SIEM/EDR/XDR and cloud platforms to determine scope and impact.
• Lead containment, eradication, and recovery while preserving evidence.
• Create and maintain detection content, playbooks, and automation for investigations.
• Collaborate with Threat Intelligence, Security Engineering, Cloud Security, and other teams.

Conhecimentos

Incident response

Multinational experience

Agile

Communication skills

DFIR

Cloud (AWS/GCP/Azure)

Forensic analysis

Scripting (PowerShell/Python)

Ferramentas

CrowdStrike

QRadar

EnCase

Office 365 Security

SIEM

EDR/XDR

Descrição da oferta de emprego

Amgen Capability Center Portugal, based in Lisbon, is seeking an Incident Response Specialist Cybersecurity Ops Analyst to join a global security team and help protect the enterprise from cyber threats.

You will drive detection, containment, eradication, and recovery of incidents, develop SOPs and playbooks, and collaborate with teams across Threat Intelligence, Cloud Security, and Endpoint Security to strengthen defenses.