incident response specialist

BP Energy

<p><b>Entity: </b></p>Technology<p><br><b>Job Family Group: </b></p>IT&S Group<p><br><b>Job Description: </b></p><p>Our purpose is to deliver energy to the world, today and tomorrow. For over 100 years, bp has focused on discovering, developing, and producing oil and gas in the nations where we operate. We are one of the few companies globally that can provide governments and customers with an integrated energy offering  click apply for full job details

Cyber Security Incident Response (CSIRT) Specialist

Vodafone

<div><div><div><div><h2 class="jobSectionHeader"><b>Who we are</b></h2>
</div><div><p>
VOIS (Vodafone Intelligent Solutions) is a strategic arm of Vodafone Group Plc, creating value for customers by delivering intelligent solutions through Talent, Technology &amp; Transformation.<br>
As the largest shared services organisation in the global telco industry with 30,000 FTE, our portfolio of next-generation solutions and services are designed in partnership with customers across Vodafone Group, local markets, and partner markets to simplify and drive growth. With our strategic partner Accenture, we work alongside our Vodafone customers, other Telco and tech companies to drive transformation, meet the challenges of our industry and ensure we stay relevant and resilient. This partnership is a unique, industry-first model which brings together the best of in-house and 3rd party capability.<br>
We work with customers across 28 countries from 10 VOIS locations: Albania, Egypt, Hungary, India, Romania, Spain, Turkey, UK, Germany, Ireland, and with a network of teams in Czech Republic, Italy, Greece, and Portugal.<br>
#VOIS #BeUnrivalled #CreateTheFuture</p></div></div><div><div><h2 class="jobSectionHeader"><b>
About this Role</b></h2>
</div><div><p>
We are seeking a skilled Cyber Security Incident Responder to join our 24/7 VCI Cyber Security and Incident Response Team. This role is pivotal in ensuring seamless business operations by investigating and analysing security alerts, triaging incidents, and collaborating with cross-functional teams to mitigate threats. The individual will contribute to process improvement, knowledge sharing, and continuous enhancement of security protocols across cloud platforms and SIEM technologies.</p></div></div><div><div><h2 class="jobSectionHeader"><b>
What you&rsquo;ll do</b></h2>
</div><div><ul><li>Investigate, analyse, and triage security alerts across platforms.</li><li>
Respond to incidents promptly, contain threats, and mitigate impact.</li><li>
Collaborate with CSIRT and local market teams for ongoing cases.</li><li>
Create and maintain SOPs, KEDBs, and process documentation.</li><li>
Develop and refine SIEM correlation rules and playbooks.</li><li>
Conduct knowledge-sharing sessions and build internal knowledgebases.</li><li>
Participate in daily stand-ups and maintain operational communication.</li><li>
Prepare detailed incident reports and provide updates to management.</li><li>
Support vulnerability management and post-incident reviews.</li><li>
Mentor and guide new team members.</li></ul></div></div><div><div><h2 class="jobSectionHeader"><b>
Who you are</b></h2>
</div><div><ul><li>Minimum 4 years of experience in Cyber Security, SIEM, and incident management.</li><li>
Proficient in SIEM technologies such as ArcSight, ELK, Splunk, QRadar, LogRhythm.</li><li>
Strong understanding of network and security concepts.</li><li>
Skilled in analytical thinking and effective communication.</li><li>
Capable of creating playbooks and contributing to process improvement.</li><li>
Holds industry-recognised certifications such as CCNA Cyber Ops, CEH; SANS certification is a plus.</li><li>
Demonstrates a proactive approach to learning and mentoring.</li></ul></div></div><div><div><h2 class="jobSectionHeader"><b>
Not a perfect fit?</b></h2>
</div><div><p>
Concerned you may not meet every requirement? Vodafone is committed to creating an inclusive workplace where everyone can thrive. If you are excited about this role but your experience does not align exactly with every aspect of the job description, you are encouraged to apply. You may be the right candidate for this or another opportunity, and the recruitment team will support you in exploring where your skills fit best.</p></div></div><div><div><h2 class="jobSectionHeader"><b>
What's in it for you</b></h2>
</div><div><ul><li>Opportunity to work in a dynamic, global cyber security environment.</li><li>
Exposure to cutting-edge SIEM platforms and cloud technologies.</li><li>
Collaborative culture with knowledge-sharing and mentoring.</li><li>
Continuous learning and development through certifications and training.</li><li>
Contribution to impactful security operations and incident response.</li></ul></div></div><div><div><h2 class="jobSectionHeader"><b>
What skills you will learn</b></h2>
</div><div><ul><li>Advanced incident response techniques and threat analysis.</li><li>
SIEM rule creation and platform fine-tuning.</li><li>
Cross-functional collaboration and communication in high-pressure scenarios.</li><li>
Process documentation and knowledgebase development.</li><li>
Vulnerability management and post-incident review practices.</li></ul></div></div><div><div><h2 class="jobSectionHeader"><b>
VOIS Equal Opportunity Employer Commitment</b></h2>
</div><div><p>
Vodafone recognises and celebrates the value of diversity in building a workforce that reflects the customers and communities it serves. No form of discrimination is tolerated. This includes, but is not limited to, discrimination based on race, colour, age, veteran status, gender identity, gender expression, sexual orientation, pregnancy, maternity or parental status, ethnicity, disability, religion or belief, political affiliation, trade union membership, nationality, citizenship, indigenous status, medical condition, HIV status, neurodiversity, social origin, cultural background, marital or civil partnership status, or socio-economic background.</p></div></div><div><div><h2 class="jobSectionHeader"><b>
Join Us</b></h2>
</div><div><p>
At Vodafone, we&rsquo;re working hard to build a better future. A more connected, inclusive and sustainable world. As a dynamic global community, it's our human spirit, together with technology, that empowers us to achieve this.<br>
We challenge and innovate in order to connect people, businesses, and communities across the world. Delighting our customers and earning their loyalty drive us, and we experiment, learn fast and get it done, together.<br>
With us, you can be truly be yourself and belong, share inspiration, embrace new opportunities, thrive, and make a real difference.</p></div></div><div><div><h2 class="jobSectionHeader"><b>
Alert</b></h2>
</div><div><p>
Apply for Vodafone jobs only through the official Vodafone Careers website to avoid job scams and fraud.<br>
#JDEnhancedByTARA</p></div></div><div><div><h2 class="jobSectionHeader"><b>
Follow us on social media and #StayConnected</b></h2>
</div><div><ul><li>LinkedIn</li><li>
Facebook</li><li>
Instagram</li><li>
Chat with our employees</li></ul></div></div></div></div>

Cyber Security Incident Responder - VOIS

Htech Solution Pvt. Ltd.

<p><b>Certifications Required:</b> CEH, CompTIA Security+, SOC Handling, SIEM Implementation</p><p>&middot; Vendor-specific certifications: <b>ELK, QRadar, Wazuh</b> (advantage)</p><p>&middot; <b>Fortinet NSE, Cisco CyberOps, </b>(plus)</p><p>At least four years Bachelors in IT / Computer Science / Telecom/ Engineering</p><p>Experience: <b>3-4 years</b> of relevant professional experience in <b>SOC operations, cyber security, or incident response.</b></p><p><b>Responsibilities:</b></p><p>&middot; Monitor <b>real-time threats</b> and handle <b>security incidents</b> across Client IT systems using advanced SOC tools.</p><p>&middot; Deploy, configure, and manage <b>SIEM solutions</b> (Wazuh, Splunk, ELK, QRadar, etc.) for <b>log collection, analysis, intrusion detection, and anomaly reporting</b>.</p><p>&middot; Perform <b>malware analysis, digital forensics, and evidence preservation</b> to support <b>cybercrime investigations</b>.</p><p>&middot; Implement and integrate <b>threat intelligence feeds</b> tailored for <b>law enforcement use cases</b>.</p><p>&middot; Utilize frameworks such as <b>MITRE ATT&amp;CK and NIST</b> for <b>incident detection, classification, and response</b>.</p><p>&middot; Conduct <b>forensic investigations</b> with tools such as <b>Volatility, Autopsy, Ghidra, and IDA Pro</b>.</p><p>&middot; Carry out <b>vulnerability assessments, penetration testing, and remediation planning</b>.</p><p>&middot; Monitor and tune <b>firewalls, IDS/IPS, and VPN security</b> systems.</p><p>&middot; Familiarity with security tools and devices.</p><p>&middot; Support <b>law enforcement digital platforms</b> (CCTV, bodycams, and surveillance systems) by securing <b>data pipelines</b> and ensuring <b>data integrity</b>.</p><p>&middot; Conduct <b>awareness sessions</b> for Client officers on phishing, ransomware, and <b>cyber hygiene best practices</b>.</p><p>&middot; Collaborate with Client units for <b>proactive threat hunting and incident response</b>.</p><p>&middot; Manage the full <b>incident response lifecycle</b>: detection, triage, containment, eradication, recovery, and reporting.</p><p>&middot; Prepare <b>incident reports, forensic documentation, and compliance reviews</b> for audits and investigations.</p><p>&middot; Provide <b>IT assistance during emergency response operations</b>.</p><p>&middot; Perform any other tasks assigned by <b>Client</b>.</p><p>Job Type: Full-time</p><p>Work Location: In person</p>

SOC Engineer / Cyber Security Engineer

Road and Transport, RTA Dubai

<br> <br>Location: UAE<br>Location: Dubai<br>Industry: Government Administration<br>Function: Security/Safety/Protective Services<br>Gender: Any<br>Candidate Nationality: UAE Nationals Only<br>Candidate Preferred Location: Any<br>Job Type: Full-time<br> <br>Core Duties<br> <br>* Monitor security systems, reports, and alerts to ensure timely response to threats<br>* Conduct regular system and network scans, ensuring safety and updating systems as required<br>* Evaluate security systems  performance and recommend infrastructure improvements<br>* Perform system audits and review procedures to maintain compliance and effectiveness<br>* Implement and coordinate incident response initiatives with relevant teams<br>* Document and report all security incidents accurately to management<br>* Collaborate with technical teams to resolve issues and support investigations<br>* Contribute to testing of security systems and tools, providing recommendations for enhancements<br>* Ensure compliance with RTA s code of conduct, policies, and crisis management frameworks<br> <br>Candidate Requirements<br> <br>* High school diploma with 5 years of experience or a technical diploma with 3 years of relevant experience<br>* Skills in systems monitoring, security incident analysis, and incident response<br>* Strong ability to prepare reports and maintain accurate documentation of incidents<br>* Proficiency in ICDL, systems monitoring, and crisis management practices<br>* Strong communication skills for technical support and collaboration with stakeholders<br>* Ability to work effectively under pressure and manage multiple tasks simultaneously<br>* Problem-solving mindset with capability to act quickly in emergencies<br><br>

Security Monitoring Technician

Nets-international Communication

<p><b>Overview</b><br/>The <b>Cybersecurity Engineer</b> will be responsible for identifying, analyzing, and mitigating security vulnerabilities across systems, applications, and networks. This role includes conducting <b>Vulnerability Assessments, Penetration Testing (VAPT)</b>, <b>Digital Forensics &amp; Incident Response (DFIR)</b>, <b>Red Team exercises</b>, and <b>Security Posture Assessments</b>. The ideal candidate will have a deep understanding of frameworks such as <b>MITRE ATT&amp;CK</b> and <b>OWASP</b>, and will work to strengthen the organization&rsquo;s security defenses against evolving threats.</p><p><b>Key Responsibilities</b></p><p><b>Vulnerability Assessment &amp; Penetration Testing (VAPT)</b></p><ul><li>Conduct web, network, mobile, and API penetration tests using tools and manual testing methods.</li><li>Identify and exploit vulnerabilities, simulate attacks, and provide detailed remediation reports.</li><li>Perform security configuration reviews for systems, firewalls, and cloud infrastructure.</li><li>Develop automated scanning scripts and processes for continuous assessment.</li></ul><p><b>Red Teaming &amp; Threat Simulation</b></p><ul><li>Execute <b>Red Team / Adversary Simulation exercises</b> to evaluate real-world attack scenarios.</li><li>Map attack chains and techniques using the <b>MITRE ATT&amp;CK framework</b>.</li><li>Collaborate with Blue Teams to test detection, response, and containment capabilities.</li><li>Document findings and improve overall organizational cyber resilience.</li></ul><p><b>Digital Forensics &amp; Incident Response (DFIR)</b></p><ul><li>Investigate and respond to security incidents, breaches, and malware attacks.</li><li>Collect, preserve, and analyze digital evidence in line with forensic best practices.</li><li>Prepare detailed incident reports with timelines, root cause analysis, and corrective actions.</li><li>Support SOC and threat-hunting teams in real-time investigations.</li></ul><p><b>Security Posture &amp; Risk Assessment</b></p><ul><li>Conduct <b>security posture reviews</b> for IT assets, networks, and cloud environments.</li><li>Evaluate security controls and recommend strategies to reduce attack surface.</li><li>Perform <b>gap analysis</b> against industry standards (ISO 27001, NIST, CIS).</li><li>Support compliance and audit readiness initiatives.</li></ul><p><b>Security Research &amp; Development</b></p><ul><li>Stay current with emerging threats, exploits, and vulnerability disclosures.</li><li>Develop custom tools or scripts for exploit testing or automation.</li><li>Participate in <b>bug bounty programs</b>, <b>CTFs</b>, or security community contributions.</li></ul><p><b>Technical Skills &amp; Tools</b></p><p><b>VAPT Tools:</b> Burp Suite, Metasploit, Nessus, Nmap, OWASP ZAP, Nikto, SQLMap<br/><b>Forensics Tools:</b> Autopsy, FTK, EnCase, Volatility, Wireshark<br/><b>Red Team Tools:</b> Cobalt Strike, Empire, BloodHound, Mimikatz, Metasploit<br/><b>Frameworks &amp; Methodologies:</b> MITRE ATT&amp;CK, OWASP Top 10, NIST 800-53, CIS Controls<br/><b>Scripting:</b> Python, Bash, PowerShell<br/><b>Cloud Security:</b> Azure, AWS, GCP (optional but preferred)<br/><b>Other:</b> SIEM (Splunk, ELK, QRadar), EDR tools, Threat Intel platforms</p><p><b>Qualifications &amp; Experience</b></p><ul><li>Bachelor&rsquo;s or Master&rsquo;s in Computer Science, Cybersecurity, or a related field.</li><li><b>3&ndash;6 years</b> of hands-on experience in penetration testing, incident response, or red teaming.</li><li>Strong knowledge of network protocols, system internals, and web technologies.</li><li>Familiarity with <b>MITRE ATT&amp;CK</b>, <b>OWASP</b>, and <b>Kill Chain models</b>.</li></ul><p>Job Type: Full-time</p><p>Ability to commute/relocate:</p><ul><li>&#305;stanbul: Reliably commute or planning to relocate before starting work (Required)</li></ul><p>Application Question(s):</p><ul><li>what is your monthly current salary?</li><li>what is your monthly expected salary?</li><li>what is your notice period?</li></ul><p>Education:</p><ul><li>Bachelor's (Preferred)</li></ul><p>Experience:</p><ul><li>Cybersecurity Engineer / Analyst (VAPT | DFIR | Red Team: 4 years (Required)</li></ul>

Cybersecurity Engineer / Analyst (VAPT | DFIR | Red Team | Posture Assessment)

Google

<div>
 Note: Google's hybrid workplace includes remote and in-office roles. By applying to this position you will have an opportunity to share your preferred working location from the following:
 <br/>
 <br/>
 <strong>
  In-office locations: Kuwait City, Kuwait.
  <br/>
  <br/>
 </strong>
 <strong>
  Remote location(s): Kuwait.
 </strong>
 <strong>
  Minimum qualifications:
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Bachelor's degree or equivalent practical experience.
  </li>
  <li>
   5 years of experience in an investigative role involved in the production of threat intelligence for decision-makers or customers and involved in direct customer support.
  </li>
  <li>
   Experience in an operational role involved in the research and writing of threat intelligence products for decision-makers or customers.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Preferred qualifications:
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Experience in program management or business.
  </li>
  <li>
   Experience in using tools for analysis such as intrusion operations, enterprise security controls, log analysis, network flow and traffic analysis, incident response processes, cyber attack life-cycles and models.
  </li>
  <li>
   Experience working in a government environment and with host and network forensic reports of electronic media, packet capture, log data analysis, malware triage and network.
  </li>
  <li>
   Experience with malware/security, Google products, and working in an investigative or incident response environment.
  </li>
  <li>
   Knowledge of cyber security concepts, common enterprise IT infrastructure components, operating system internals and networking.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  About The Job
  <br/>
  <br/>
 </strong>
 As a Security Consultant, you will be responsible for helping clients effectively prepare for, proactively mitigate, and detect and respond to cyber security threats. Security Consultants have an understanding of computer science, operating system functionality and networking, cloud services, corporate network environments and how to apply this knowledge to cyber security threats.
 <br/>
 <br/>
 As a Security Consultant, you could work on engagements including assisting clients in navigating technically complex and high-profile incidents, performing forensic analysis, threat hunting, and malware triage. You may also test client networks, applications and devices by emulating the latest techniques to help them defend against threats, and will be the technical advocate for information security requirements and provide an in-depth understanding of the information security domain. You will also articulate and present complex concepts to business stakeholders, executive leadership, and technical contributors and successfully lead complex engagements alongside cross functional teams.
 <br/>
 <br/>
 Mandiant Services provides incident response, assessment, transformation, managed detection and response, and training services with direct tactical support.
 <br/>
 <br/>
 In this role, you will ensure the delivery of intelligence to each customer&rsquo;s security or operational environments in order to drive decision making and selective action. You will also act as a conduit to Mandiant&rsquo;s extensive network of cyber security, threat intelligence, and information operations professionals.
 <br/>
 <br/>
 Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. By scaling decades of frontline experience, Mandiant helps organizations to be confident in their readiness to defend against and respond to cyber threats.
 <br/>
 <br/>
 <strong>
  Responsibilities
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Evaluate current and emerging tools, best practices, and techniques for tracking advanced continuous threats, as well as the tools, Tactics, Techniques, and Procedures (TTPs) related to attackers' motivations, industry trends, and attacker behavior.
  </li>
  <li>
   Perform tactical and operational research and analysis of adversarial cyber threats.
  </li>
  <li>
   Correlate intelligence to develop an understanding of tracked threat activity.
  </li>
  <li>
   Present tactical intelligence about threat groups, the methodologies they use, and the motivations behind their activity.
  </li>
  <li>
   Prepare and deliver briefings and reports to the client&rsquo;s executives, security team, or analysts.
   <br/>
   <br/>
   <br/>
  </li>
 </ul>
 Google is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. See also Google's EEO Policy and EEO is the Law. If you have a disability or special need that requires accommodation, please let us know by completing our Accommodations for Applicants form .
</div>


Senior Intelligence Analyst

<div>Note: Google's hybrid workplace includes remote and in-office roles. By applying to this position you will have an opportunity to share your preferred working location from the following:<br>
<br>
<b>In-office locations: Kuwait City, Kuwait.</b><br>
<b>Remote location(s): Kuwait.</b><h3 class="jobSectionHeader"><b>
Minimum qualifications:</b></h3><ul>
<li>Bachelor's degree or equivalent practical experience.</li>
<li>5 years of experience in an investigative role involved in the production of threat intelligence for decision-makers or customers and involved in direct customer support.</li>
<li>Experience in an operational role involved in the research and writing of threat intelligence products for decision-makers or customers.</li></ul><br>
<h3 class="jobSectionHeader"><b>
Preferred qualifications:</b></h3><ul>
<li>Experience in program management or business.</li>
<li>Experience in using tools for analysis such as intrusion operations, enterprise security controls, log analysis, network flow and traffic analysis, incident response processes, cyber attack life-cycles and models.</li>
<li>Experience working in a government environment and with host and network forensic reports of electronic media, packet capture, log data analysis, malware triage and network.</li>
<li>Experience with malware/security, Google products, and working in an investigative or incident response environment.</li>
<li>Knowledge of cyber security concepts, common enterprise IT infrastructure components, operating system internals and networking.</li>
</ul><div><h2 class="jobSectionHeader"><b>About the job</b></h2><p>
As a Security Consultant, you will be responsible for helping clients effectively prepare for, proactively mitigate, and detect and respond to cyber security threats. Security Consultants have an understanding of computer science, operating system functionality and networking, cloud services, corporate network environments and how to apply this knowledge to cyber security threats.
<br>
<br>
As a Security Consultant, you could work on engagements including assisting clients in navigating technically complex and high-profile incidents, performing forensic analysis, threat hunting, and malware triage. You may also test client networks, applications and devices by emulating the latest techniques to help them defend against threats, and will be the technical advocate for information security requirements and provide an in-depth understanding of the information security domain. You will also articulate and present complex concepts to business stakeholders, executive leadership, and technical contributors and successfully lead complex engagements alongside cross functional teams.</p><br>
<p>
Mandiant Services provides incident response, assessment, transformation, managed detection and response, and training services with direct tactical support.</p><div><div>
In this role, you will ensure the delivery of intelligence to each customer&rsquo;s security or operational environments in order to drive decision making and selective action. You will also act as a conduit to Mandiant&rsquo;s extensive network of cyber security, threat intelligence, and information operations professionals.
</div></div><p>Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. By scaling decades of frontline experience, Mandiant helps organizations to be confident in their readiness to defend against and respond to cyber threats.</p></div><div><h2 class="jobSectionHeader"><b><br>
Responsibilities</b></h2><ul>
<li>Evaluate current and emerging tools, best practices, and techniques for tracking advanced continuous threats, as well as the tools, Tactics, Techniques, and Procedures (TTPs) related to attackers' motivations, industry trends, and attacker behavior.</li>
<li>Perform tactical and operational research and analysis of adversarial cyber threats.</li>
<li>Correlate intelligence to develop an understanding of tracked threat activity.</li>
<li>Present tactical intelligence about threat groups, the methodologies they use, and the motivations behind their activity.</li>
<li>Prepare and deliver briefings and reports to the client&rsquo;s executives, security team, or analysts.</li>
</ul></div>Google is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. See also Google's EEO Policy and EEO is the Law. If you have a disability or special need that requires accommodation, please let us know by completing our Accommodations for Applicants form.</div>

Search 8657+ Incident response specialist jobs near you this November. New roles added regularly across leading industries. Apply today.

8657 incident response specialist jobs NEAR_ME

Cyber Security Incident Response (CSIRT) Specialist

Cyber Security Incident Responder - VOIS

SOC Engineer / Cyber Security Engineer

Security Monitoring Technician

Cybersecurity Engineer / Analyst (VAPT | DFIR | Red Team | Posture Assessment)

Senior Intelligence Analyst

Senior Intelligence Analyst