Incident Response Security Analyst

About the Position

Incident Response Security Analyst

Join Ubisoft as an Incident Response Security Analyst to protect our gaming assets and enhance our security posture.

Responsibilities

• Acting as a central point of contact within the global incident response team, the Security Analyst will:
• Analyze and respond to alerts generated by our SIEM (Security Information and Events management) and other security tool suite (EDR, Identity service, etc.) on a day-to-day basis
• Perform forensic and investigation activities on hosts, network, infrastructure, and applications targeted by threat actors
• Identify attacker tactics, techniques, and procedures and proactively hunt for threats based on intelligence and hypothesis
• Lead incident response activities end-to-end for incidents of low and medium criticality before, during, and after incidents
• Support and coordinate incident response activities for high and critical incidents before, during, and after incidents
• Drive decision-making processes under pressure to determine incident handling approaches (contain vs monitor, isolate vs preserve, shutdown or maintain availability)
• Produce clear investigation reports for technical and non-technical audiences
• Validate and enrich detection by collaborating with the detection engineering team and propose alert tuning strategies and implementations
• Validate and tune our security tool suite by providing feedback to the detection engineering team and suggest improvement plans
• Participate in the creation and implementation of incident response plans
• Occasionally participate in internal investigations (local and corporate headquarters) in accordance with established policies
• Collaborate on threat intelligence activities by performing relevant and efficient analyses and reporting back findings
• Propose solutions to mitigate identified risks and bring them to an acceptable level for management
• Carry out all other related tasks

Requirements

Education & Experience

• Bachelor’s Degree in Computer Sciences or any related discipline
• 2+ years in operating system administration and/or network administration
• 2+ years in audit and/or incident response and/or monitoring
• 2+ years in other security-related functions
• 1+ years in managing SIEM, IDS/IPS, EDR/XDR solutions in a fast-paced environment
• Hands-on experience in incident response and coordination
• SANS GIAC certification is a strong asset

Knowledge & Skills

• Ability to work under pressure and adapt quickly to change
• Good problem-solving skills
• Ability to manipulate sensitive information
• Ability to analyze and summarize complex data
• Effectively collaborate with a variety of stakeholders from top management to business and technical stakeholders
• Proactive, methodic, and result-oriented
• Solid business understanding
• Ability to write clear and concise documentation
• Adapt quickly to change
• English & Mandarin is required (Written and verbal communication)
• French language is an asset
• Interpersonal and negotiation skills

We Offer

• Opportunity to work in a global leader in gaming
• Diverse and inclusive work environment
• Professional growth and development opportunities

About the Company

Ubisoft is a global leader in gaming with teams across the world creating original and memorable gaming experiences, from Assassin’s Creed, Rainbow Six, to Just Dance and more. We believe diverse perspectives help both players and teams thrive. If you’re passionate about innovation and pushing entertainment boundaries, join our journey and help us create the unknown!

Created in 1996, Ubisoft Shanghai studio, is a vibrant and exciting place where our talents get opportunities to either co-develop great AAA blockbuster games, create cutting-edge online games, or produce fun mobile games.

To learn more, please visit: www.ubisoftgroup.com