Security Incident Response Coordinator

What we’re looking for

We seek a skilled Incident Response Coordinator with strong operational security experience, including malware analysis, threat intelligence, and deep investigation of security incidents. The ideal candidate will have expertise in network and systems security, cloud security, and incident management, along with relevant certifications (e.g., SANS GCIH, CISSP, CEH). You should be analytical, detail-oriented, and capable of managing complex cybersecurity incidents, working collaboratively in a fast-paced environment, and sharing your knowledge with team members.

What you’ll be doing

• Act as the first responder for cyber-security incidents identified through different channels.
• Investigate cases such as, but not limited to: malware, cyberattack, APT, security breaches.
• Understand and identify indicators of attack and indicators of compromise.
• Investigate root cause of complex security incidents.
• Analyze incident data from threat analytics tools.
• Coordinate a response to the security incident with other internal teams and vendors.
• Develop, document and implement runbooks, capabilities and techniques for Incident Response.
• Develop reactive measures using automation tools (SOAR).
• Perform security triage and analysis / threat hunting on endpoint, server and network infrastructure.
• Perform activities necessary for immediate containment and short-term resolution of incidents.
• Collect, preserve and process volatile information and evidences needed to conduct highly-confidential forensic investigations.
• Ensures forensic investigation and incident response procedures comply with standard operating procedures, processes, policies, guidelines and forensics best practices.
• Examine and analyze security events or incidents and investigate significant issues related to technology infrastructure.
• Coordinate or provide recommendations for containment and remediation steps until security incident closure.
• Prepare detailed written reports that document the incident timeline and circumstances, present forensic evidence to varied audiences and offer expert opinions. Communicate investigation results and findings for administrative or legal purposes to internal stakeholders, senior management, auditors etc.
• Lead efforts to refine incident response and forensics methodologies, optimize related processes and procedures.
• Coach and advise teams on effective security practices, procedures and technical countermeasures to reduce risk.

What you need to know/have

• Experience in Security Incident Response with operational security experience (Indicator of Attack / Indicator of Compromise deep investigation, Malware Analysis, Threat Analytics, Threat Intelligence etc.)
• Experience in Network Security Administration and/or Systems Administration (Windows Server and Active Directory)
• Experience with various EDR solutions
• You have knowledge of various query languages for SIEM
• Cloud experience with any of the major cloud providers, including cloud security
• Ability to manage complex incident response situations with a focus on deep technical troubleshooting
• You have knowledge of Linux and Windows server systems and hardening methodology
• You have networking knowledge (TCP/IP, routing protocols etc.), troubleshooting skills
• You have knowledge of virtualization concepts and solutions
• You have basic knowledge about scripting (any from bash, Python, Powershell)
• You graduated from a faculty such as Electronics, Telecommunications and Information Technology, Automatic Control and Computer Science, Cybernetics
• You have IT Industry certifications (SANS GCIH, CISSP, CEH, OSCP etc.)
• You show analytical thinking and attention to details, gained in participating to different projects and activities either curricular or extra-curricular
• You are able to work comfortably in a fast-changing environment on interesting technical challenges
• You are all about sharing and collaboration with your team mates
• You are perceived as expert in your area of competence

Orange Services is about bringing together people and technology.

Come & work for a #TopEmployer company. You could be part of an organization where great colleagues and team spirit support your professional development.

At Orange, you can.

We encourage all candidate profiles, regardless of gender, age, race, citizenship, ethnicity, color, language, religion, social origin, genetic traits, sexual orientation, permanent or temporary disability, nationality, political choice, social category or social origins, situation or family responsibility, belonging to a disadvantaged category, membership or trade union activity.

IMPORTANT

In order to be able to follow your application status and receive relevant notifications, make sure to complete your application in our ATS (applicant tracking system), by following the redirection link. Once this step is completed, you will receive a confirmation email from Orange that your application has been successfully registered.

What’s in it for you

• Performance Bonuses- based on your results & the company’s
• Electronic Meal Tickets
• Medical & Life insurance for you - facilities for your family, too
• Professional GSM subscription
• Personal GSM subscription, also [because we believe in communication!]
• Special grants on Smartphones & devices; discounts for Orange products & services
• Development Platforms - Orange Learning, Trainings, Career Counselling, Coaching & Career plan mentoring
• Wellbeing Programs - we support your Zen

How would you like to work in IT, toying with cutting edge technologies and enjoying your life? At Orange Services, it’s possible!

As one of the largest IT Hub within Orange Group, we are working internationally for both Orange corporate functions and country operations. Through a unique combination of know-how and expertise, our teams provide a broad range of IT & Business Solutions.

Come closer to #LifeAtOrange!