Cyber Incident Handling

About the Position

Cyber Incident Handling

Madrid, Spain

Devoteam is a leading European consultancy focused on digital strategy, technology platforms, cybersecurity, and business transformation through technology. With 26 years of experience, we are an innovative, consolidated, and mature consulting firm that enables the development of our 10,000 people, continuously certifying our consultants in the latest technologies.

We are looking for a Cyber Incident Handling expert to join our team and manage and respond to cyber security incidents globally.

Responsibilities

• Handle and respond to cyber security incidents to ensure a comprehensive and cohesive world-class response.
• Analyze incidents and determine their impacts.
• Notification and escalation of incidents according to their impacts.
• Participate in the containment, eradication, and recovery of major incidents.
• Document and keep track of every activity related to the incident response process.
• Develop a post-mortem analysis of systems and networks.
• Manage complex cybersecurity incidents globally across the group.
• Orchestrate the necessary human and technical resources for the resolution of high-impact cyber incidents.
• Design and supervise an organized approach to address and manage the aftermath of a security breach or cyberattack.
• Drive continuous improvement in cyber response capability through involvement in the cyber readiness program.
• Review and coordinate projects related to the development and improvement of Incident Response plans, policies, and procedures.
• Participate in the cyber exercises program to develop capabilities globally.
• Contribute to the establishment of a strong and collaborative Global Community between Cyber Threat Units.
• Collaborate with key stakeholders within the bank, such as Global Forensics, Global Security Operations Centre, Corporate Security & Intelligence, Global Cyber Fraud, and the Secure User Experience team, among others.
• Be available to participate in the incident response procedure on a 24x7 basis, 8-hour shifts, and On-Call scheme.

Requirements

• Experience: 1+ years of experience in cybersecurity with a broad understanding of information security and previous experience as part of a CIRT, CSIRT, or similar response team.
• Education: Degree in computer science, engineering, or similar.
• Skills & Knowledge:
  • Required:
    • Knowledge of Incident Response and Handling methodologies.
    • Knowledge of cyber incident categories, incident response, and timelines for responses.
    • Knowledge of cyber defense and information security procedures and regulations.
    • Knowledge of cyber attack stages (e.g., reconnaissance, scanning, enumeration, gaining access, escalation of privileges, maintaining access, network exploitation, covering tracks).
    • Knowledge of risk management processes (e.g., methods for assessing and mitigating risk).
    • High level of English.
  • Recommended:
    • Desired one or more of the following certifications: CISSP, CISA, CISM, CEH, OSCP, GCIH.
    • Experience in the financial/banking industry.

We Offer

• Opportunity to work with a leading European consultancy.
• Be part of a world-class capability that will own, respond, and coordinate significant incidents.
• Drive continuous improvement in cyber response capability.
• Collaborate with key stakeholders within the bank.

About the Company

Devoteam is a leading European consultancy focused on digital strategy, technology platforms, cybersecurity, and business transformation through technology. With 26 years of experience, we are an innovative, consolidated, and mature consulting firm that enables the development of our 10,000 people, continuously certifying our consultants in the latest technologies.