INCIDENT LEAD (SHE/HE/THEY)

Hi #DigitalLover! 💙 We’re sure you’re tired of the same old corporate security vacancies and you are seeking for new job opportunities in this field that offer an exciting career prospect. If this is your case, this is your lucky day! 😊 First, let’s talk about BSA! BSA (Business Support & Advisory) is an integral and global unit of the company oriented towards internal clients. Its team is a key part of the company's performance in three areas: operations, compliance and advisory. This area develops solutions aligned with the company's strategic objectives in order to be more efficient, productive and innovative. Thanks to its expert knowledge, it provides professional support and accompaniment in different areas (HR, Finance, Legal, IT, Real Estate & Workplace, Marketing, Procurement, Security & Privacy, among others) to advise the business on decision-making. #TrustedAdvisor&First Choice Now, it’s time to talk about the Corporate Security department: Currently seeking a skilled professional to join our Corporate Security team as an Incident Handler. In this role, the individual will play a crucial part in overseeing and orchestrating incident response efforts to ensure the security and robustness of our company. Responsibilities include formulating procedures for executing incident handling and reporting, establishing communication protocols with diverse stakeholders regarding incidents, and assessing the need for more comprehensive forensic data collection and analysis during incident response, serving as well as a scaling point. Would you like to be part of our internal team? 😊 Here are the main functions you could perform: Provide oversight and hands-on leadership in coordinating incident response functions.Coordinate the ongoing analysis activities for Incident Response across all types of technologies or environments.Maintain and share Incident documentation.Ensure effective alert monitoring, data ingestion, logs collection and analysis, incident handling, and remediation and reporting efforts by Incident Response Teams.Serve as the primary source of truth during an incident.Conduct operational update meetings for CSIRT staff.Act as an escalation point to facilitate incident resolution and provide consulting to Executive Leadership for decision guidance as needed.Design and lead periodic tabletop exercises.Drive continuous improvement initiatives, including regular quality reviews for Incident Response.Offer direction and guidance in high-stress situations while collaborating with cross-functional teams, including legal, business areas, compliance, IT, and other stakeholders, to ensure a unified and coordinated response.Report and be an advisor to the corporate Head of Security Operations.Undertake additional duties as needed. We're sure that if this suits you, you'll have this profile: Experience: A minimum of 5+ of experience in incident response, digital forensics, or a related field. Technical Skills:Have a bachelor’s degree (Computer Science or similar degree) and higher education or equivalent professional experience.Understanding the various stages of a cyber-attack, including but not limited to reconnaissance, scanning, enumeration, gaining access, privilege escalation, maintaining access, network exploitation, and covering tracks.Knowledge of incident management and response processes and procedures aligned with best practices.Previous hands-on experience performing digital forensics and incident response (digital evidence collection and analysis, containment, eradication, recovery activities, etc.).Experience in cloud incident response.Desirable but not required:Professional certifications including GCFA, GCFA, GCIH, CHFI.Experience using incident management systems like TheHive, ServiceNow, Resilient, etc.Experience with disassemblers, debuggers, and other reverse engineering tools.Experience in endpoint security technologies / EDR to include basic administration and understanding of prevention and detection policies (e.g., exclusion policies, signature vs. machine learning, installation, and deployment of agents/sensors).Functional Skills:Ability to lead, encourage and influence staff across the organization, decision-making and priority identifying.Strong verbal and written communication skills.Strong C-Level management skills.Strong background in all aspects of IT.Proven history of working independently in a self-motivated manner.Ability to convey a strong presence, professional image, and deal confidently with complex technical problems.Languages:Fluent professional English proficiency (C1 or higher).Professional proficiency (B2 or higher) in Spanish or other languages in the EMEAL perimeter will be valued.Location: Any location in the EMEAL perimeter (Barcelona or Madrid will be highly considered).If all of the above fits you, we have good news for you: NTT DATA is your place! 😊 At NTT Data, we believe everyone is unique and different, this is why we bet for an inclusive culture that recognizes and values diversity. We work day after day to create an environment in wich we can explore, live and enhance our own singularity. #WeAreAllUnique #YouMakeUsUnique We can't wait to meet you #DigitalLover! 💙