Incident Response Engineer
Role details
Job location
Tech stack
Job description
-
Lead and execute remote/on-site incident response.
-
Perform forensic investigations based on available artefacts.
-
Contain, eradicate, and document incidents.
-
Secure and handle evidence properly.
-
Improve tools and workflows.
-
Support threat hunting and research.
-
Represent Kudelski Security at conferences by delivering technical talks related to incident response.
-
Join a paid on-call rotation
Requirements
As part of Kudelski Security Counter Adversary Unit, you'll lead and execute incident response investigations - analyzing attacks, containing threats, and guiding clients on secure restoration back to business. This is a highly technical role that also involves direct client interaction, requiring strong analytical thinking, communication skills, and professional presence. When not on an incident, you'll improve tools, write scripts, contribute to threat hunts, support client onboarding, share findings through research publications, and present at conferences to showcase Kudelski Security IR capabilities., * 3+ years in cyber operations or IR.
- Strong knowledge of Windows/Linux, scripting, and network protocols.
- Skilled in forensic and EDR tools.
- Calm under pressure, good communicator.
- Fluent in English; French or German is a plus.
Bonus Point
- Previous experience working in an MDR (Managed Detection & Response) environment.
- Solid cybersecurity certifications relevant to incident response, digital forensics, or offensive security.
- Malware analysis or threat intel skills.
- Open-source or IR tooling contributions.