Cybersecurity Incident Responder

Andersen is seeking a Cybersecurity Incident Responder to join a project focused on protecting critical systems and managing security incidents within a complex international environment. You will play a key role in ensuring the security and reliability of digital services for global organizations.

Key responsibilities

• Execute the full incident lifecycle, including triage, containment, eradication, and recovery.
• Perform digital forensics on endpoints, servers, and cloud workloads.
• Investigate escalated alerts to determine the scope and impact of security incidents.
• Develop and maintain incident response playbooks and conduct tabletop exercises.
• Coordinate response activities with client organizations, IT teams, and management.

Requirements

• At least 5 years of experience in cybersecurity, with 3+ years in hands-on incident response.
• Proven experience handling real-world incidents such as ransomware, BEC, and data exfiltration.
• Strong proficiency with EDR/XDR tools and forensic analysis techniques for Windows and Linux.
• Solid knowledge of NIST SP 800-61 or SANS incident handling frameworks.
• Upper-Intermediate level of English and readiness for on-call rotation.

What we offer

• Opportunities for professional, financial, and career growth with structured mentoring.
• Access to a comprehensive corporate training portal and certification compensation.
• Participation in a referral program and potential for additional performance-based bonuses.
• Private health insurance and sports compensation packages.