Cybersecurity Incident Responder

Responsibilities

• Contribute to the development, maintenance, and continuous improvement of the Incident Response Plan
• Develop and implement incident response procedures, playbooks, and workflows
• Identify, analyze, contain, and mitigate cybersecurity incidents across enterprise environments
• Lead technical cybersecurity incident investigations throughout the response lifecycle
• Perform incident triage and assess security alerts to determine response actions
• Monitor and respond to security events via SOC capabilities and monitoring platforms
• Manage and analyze log files, security events, and forensic evidence
• Utilize IR tools including XDR, SIEM, and NDR platforms
• Document investigations, findings, and corrective actions
• Collaborate with technical, legal, compliance, and business stakeholders

Requirements

• Minimum 8 years of experience in cybersecurity incident response or security operations
• At least two incident handling certifications (e.g., GCIH, GCIA, ECIH, CSIH, or SCMO)
• At least one additional certification (e.g., GPEN, CCFP, or SCMO)
• Strong knowledge of incident handling standards, methodologies, and frameworks
• Hands-on experience with cybersecurity investigation tools
• Deep understanding of operating system security, network security, and threat actor tactics
• Experience working within SOC or CSIRT environments
• Ability to work effectively in high-pressure, time-sensitive situations
• EU Restricted security clearance required from day one

About the Company

Arηs Group, Part of Accenture, specializes in the management of complex public sector IT projects, including systems integration, informatics, and security management.