Cyber Incident Handler

About the role

We are seeking a Cyber Incident Handler to lead the detection, investigation, containment, and remediation of security incidents across our enterprise environment. The role works through the full incident lifecycle, collaborating with technical teams and business stakeholders to protect critical operations.

Key responsibilities

• Identify, investigate, and respond to cyber security incidents, threats, and vulnerabilities.
• Analyze security events, logs, endpoint artefacts, and network activity to support containment and resolution.
• Coordinate response activities across technical teams, stakeholders, and business units during live incidents and post‑incident reviews.
• Produce clear written and verbal updates for security leadership, including technical findings, risk context, and remediation recommendations.
• Contribute to the development and improvement of incident response playbooks, processes, and overall cyber security capability.

Required profile

• 4+ years of experience in information security, preferably in incident response, security operations, or a related cyber defence role.
• Strong technical understanding of Windows, Linux/UNIX, networking concepts, and enterprise security technologies.
• Hands‑on experience investigating security events, analysing logs, determining root cause, and supporting remediation.
• Familiarity with ITIL‑based incident, problem, and change management processes and ticketing systems.
• Relevant security certifications (e.g., GIAC, EC‑Council, CompTIA) are highly regarded.

Required skills

• Windows operating systems
• Linux/UNIX operating systems
• Networking concepts
• SIEM platforms
• IDS/IPS solutions
• Endpoint security tools
• Firewalls and DLP technologies
• Vulnerability management and forensic platforms
• ITIL processes and ticketing systems

What we offer

• Opportunity to work in a mature enterprise cyber security environment with complex incident response exposure.
• Collaborative team culture and strong stakeholder engagement.
• Continuous development of technical expertise in incident response, threat analysis, and digital investigations.