{"id":1879242,"url":"https://alion.io/job/allianz-incident-response-d2881-2","title":"Incident Response_D2881","company":{"id":1757325,"name":"Allianz","domain":"allianz.com","url":"https://alion.io/company/allianz-com","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Phenom","truth_index":{"grade":"A","score":100,"open_postings":138,"ghost_share":0,"stale_share":0,"repost_share":0.051,"time_to_fill_p50_days":13,"computed_at":"2026-10-29T05:49:05Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":true},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"CI/CD","optional":true},{"name":"GCP","optional":true},{"name":"Go","optional":true},{"name":"Microsoft Entra ID","optional":true},{"name":"MITRE ATT&CK","optional":true},{"name":"PowerShell","optional":true},{"name":"Python","optional":true},{"name":"SIEM","optional":true},{"name":"Windows","optional":true}],"status":"closed","first_seen_at":"2026-09-20T00:00:00Z","employer_posted_date":"2026-10-21","last_verified_at":"2026-10-27T07:47:39Z","board_verified":false,"closed_at":"2026-10-27T07:47:39Z","days_open":37,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":37},"description":"As a Senior Security Incident Responder, you play a key role in this team: you lead complex incident response activities, bring deep technical expertise, and make a significant contribution to continuously improving our security posture and internal capabilities.\nDuties and Responsibilities\nCoordinate and own security incident response activities in a heterogeneous, multi-cultural, and geographically distributed environment - engaging all relevant technical and non-technical stakeholders across all phases of an incident.\nAcquire and analyse data from various sources during incident response activities and report on findings in a clear, actionable manner.\nConduct incident reviews, identify improvement potentials, and support the implementation of improvements - including updating guidelines, runbooks, and internal processes.\nActively contribute to enhancing ACDC's internal toolset through new ideas on functionality and features, as well as by developing automation scripts and custom tooling.\nAnalyse complex attack patterns and threat actors, derive technical insights, and provide recommendations to improve Allianz's detection and defence capabilities.\nCollaborate closely with internal teams - including Threat Intelligence, Vulnerability Management, and Business Applications Teams - as well as external partners to ensure holistic and coordinated incident response.\nParticipate in on-call shifts and contribute to the ACDC team's 24/7 availability, ensuring rapid response to critical security incidents at any time.\nDocument and communicate incidents and remediation efforts.\nStay updated on cyber threats and security technologies.\nCommunicate effectively with clients and manage expectations.\nSupport audits and adhere to change management processes.\nCollaborate with teams across Allianz businesses.\nQualification, Experience, Technical and Functional Skills\nUniversity degree (Master's preferred) in Computer Science, Cyber Security, or a related field.\nExtensive work experience in Incident Response, including managing complex environments; expertise in IT Forensics, Malware Analysis, or Vulnerability Management is a plus.\nComprehensive technical expertise in system architecture with broad proficiency in key IT security technologies: Linux and Windows, Active Directory / Entra ID, web technologies, email, networking, cryptography, and widely used DevOps tools.\nSoftware engineering and scripting skills: Python, Golang, Shell scripting, PowerShell, CI/CD, and database management.\nStrong understanding of technical and organisational aspects of information security, demonstrated through prior defensive or offensive work experience.\nIn-depth knowledge of fundamental attack concepts: terminology, tools, tactics, techniques, and procedures (TTPs).\nExceptional analytical and problem-solving mindset with the ability to collect, structure, analyse, and communicate large amounts of information with precision and attention to detail.\nExcellent communication and interpersonal skills in English (fluent, written and spoken, including security terminology); willingness to participate in on-call shifts. Relevant certifications (e.g. SANS/GIAC, GCIH, GNFA, GCFA, GREM, GCFE, GIME), CompTIA Security+, CISSP, CISA, or CISM) are a plus but not mandatory.\nKey Competencies\nIncident Response: Expertise in handling and responding to security incidents effectively.\nDeep understanding of cybersecurity, network security, and malware analysis. Proficient with security tools like SIEM and EDR and other SOC tools.\nAttack Knowledge: Familiar with frameworks like MITRE ATT&CK to understand attacker methods.\nThreat Hunting: Ability to proactively identify and analyse threats within the network.\nScripting: Proficient in Python or PowerShell for automating tasks would be added advantage.\nCloud Security: Understanding of security in cloud environments like AWS, Azure, or GCP.\nCommunication: Strong skills in conveying technical information clearly.\nProblem-Solving: Excellent at diagnosing and resolving security issues.\nCollaboration: Ability to work well with teams and mentor junior staff.\nAdaptability: Comfortable working in fast-paced and changing environments.\nContinuous Learning: Keeps up with the latest cyber threats and technologies\nFamiliarity with basic AI tools is considered an advantage.\n Allianz Group is one of the most trusted insurance and asset management companies in the world. Caring for our employees, their ambitions, dreams and challenges, is what makes us a unique employer. Together we can build an environment where everyone feels empowered and has the confidence to explore, to grow and to shape a better future for our customers and the world around us.\nAt Allianz, we stand for unity: we believe that a united world is a more prosperous world, and we are dedicated to consistently advocating for equal opportunities for all. And the foundation for this is our inclusive workplace, where people and performance both matter, and nurtures a culture grounded in integrity, fairness, inclusion and trust.\nWe therefore welcome applications regardless of ethnicity or cultural background, age, gender, nationality, religion, social class, disability or sexual orientation, or any other characteristics protected under applicable local laws and regulations.\nGreat to have you on board. Let's care for tomorrow","description_format":"text","description_chars":5360,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"master","optional":true},"security_clearance":false,"languages":[{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":["Continuous learning"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Property & Casualty Insurance","Asset Management & Funds","Life Insurance & Annuities"],"lifecycle":[{"event":"open","at":"2026-10-04T23:23:37Z"},{"event":"close","at":"2026-10-12T04:31:49Z"},{"event":"reopen","at":"2026-10-12T17:47:29Z"},{"event":"close","at":"2026-10-15T01:38:53Z"},{"event":"reopen","at":"2026-10-15T05:47:18Z"},{"event":"close","at":"2026-10-16T22:09:21Z"},{"event":"reopen","at":"2026-10-17T02:04:36Z"},{"event":"close","at":"2026-10-27T07:47:39Z"}],"visa":[],"liveness":null,"pay":null,"html_url":"https://alion.io/job/allianz-incident-response-d2881-2","json_url":"https://alion.io/job/allianz-incident-response-d2881-2.json","meta":{"generated_at":"2026-10-29T18:39:16Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":27644,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-30T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1757325},"rest":"https://alion.io/mcp/rest/get_company?id=1757325"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fallianz-incident-response-d2881-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fallianz-incident-response-d2881-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fallianz-incident-response-d2881-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/allianz-incident-response-d2881-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fallianz-incident-response-d2881-2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":1879242}},{"tool":"search_jobs","arguments":{"company":"allianz.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":1879242},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}