Cybersecurity and Incident Response Specialist

About the role

The Cybersecurity and Incident Response Specialist acts as the first line of defense for security incidents across multiple channels, including HR, corporate investigations, and client escalations. You will lead investigations, preserve evidence, and coordinate remediation to protect the organization’s assets and reputation.

Key responsibilities

• Respond to and investigate security incidents such as policy violations, malware, intellectual property theft, and advanced persistent threats.
• Execute the CIRT playbook, escalating events according to severity and documenting each step of the incident response lifecycle.
• Collect, preserve, and analyze volatile and non‑volatile digital evidence from storage media, servers, workstations, mobile devices, and memory.
• Produce detailed forensic reports and present findings to senior management, auditors, legal teams, and, when required, as an expert witness.
• Provide eDiscovery and litigation support, including identification, preservation, collection, and review of electronically stored information.
• Mentor incident response staff on best practices, tools, and countermeasures.

Required profile

• 4‑5 years of experience in information security, specifically incident response and digital forensics.
• Proven ability to conduct complex investigations and communicate results to non‑technical audiences.
• Strong analytical, investigative, and problem‑solving skills.

Required skills

• Computer and network forensics tools: EnCase, SIFT, IEF, HB Gary, FireEye, Mandiant, Nuix.
• Experience with forensic analysis of storage media, servers, workstations, mobile devices, and volatile memory.
• eDiscovery and litigation support processes.
• Incident response methodology and CIRT playbook execution.