Cybersecurity and Incident Response Specialist

About the role

We are looking for a Cybersecurity and Incident Response Specialist to serve as the first line of defence against security incidents across the organisation. The role involves rapid investigation, containment and remediation of threats while preserving evidence for potential legal actions.

Key responsibilities

• Act as the primary responder for cyber‑security incidents reported by HR, corporate investigations, ASOC, infrastructure CIRT and client escalations.
• Investigate a wide range of cases including policy violations, malware, intellectual property theft, espionage, hacking, APTs and mobile device compromises.
• Execute the CIRT playbook, collect and preserve volatile data, and conduct forensic analysis of storage media, electronic files, logs and memory.
• Escalate incidents according to severity, coordinate containment and remediation, and ensure closure of incidents.
• Produce detailed reports and present findings to senior management, auditors, legal teams and, when required, act as an expert witness.
• Provide eDiscovery and litigation support, and mentor junior incident response staff.

Required profile

• 4‑5 years of experience in information security, incident response or digital forensics.
• Proven ability to handle confidential investigations and work under pressure.
• Strong analytical and investigative skills with attention to detail.

Required skills

• Hands‑on experience with forensic tools such as EnCase, SIFT, IEF, HB Gary, FireEye, Mandiant and Nuix.
• Knowledge of workstation and server operating systems, network forensics and volatile memory analysis.
• Experience with eDiscovery processes and litigation support.