Acting as a permanent member of the Cybersecurity Incident Response Team (CIRT)
Executing and supporting technical incident response activities, including analysis, containment, and recovery
Escalating critical technical findings and risks to the Incident Commander
Supporting the Incident Commander and Incident Coordinators in the technical execution of incident response activities
Providing technical guidance and expertise to other IR roles
Collaborating closely with Digital Forensics and Threat Intelligence teams to enable in-depth technical analysis
Performing and reporting root cause analysis, incident status, and potential response measures
Supplying accurate technical input for internal communication and external reporting to authorities via the Incident Commander
Ensuring complete and structured documentation of all incident response activities

Several years of professional experience in cybersecurity incident response, SOC, DFIR, or cyber defense environments
Strong technical knowledge of IT infrastructures, networks, operating systems, and cloud environments
Proven experience in handling complex or high-severity cybersecurity incidents
Solid understanding of attacker Tactics, Techniques, and Procedures (TTPs) and the ability to identify, analyze, and respond to them in real-world incidents
Experience mapping observed activity to frameworks such as MITRE ATT&CK and deriving response or mitigation measures
Sound understanding of established incident response frameworks (e.g. NIST, SANS)
Ability to communicate technical findings clearly and concisely to different stakeholder groups
Structured, reliable, and resilient working style, particularly in critical situations.

Senior Cybersecurity Incident Responder

Key skills