Incident Response Analyst

• Lead and coordinate security incident detection, analysis, and response activities
• Ensure the operational effectiveness of the program and drive its maturity and scope
• Develop and lead the end-to-end evolution of the detection, analysis, and incident response program
• Define the coverage scope and ensure it is complete and aligned with business needs
• Define, prioritize, and evolve detection use cases
• Document the necessary context to reduce false positives
• Oversee alert monitoring, triage, and analysis
• Coordinate security incident management from qualification through closure, including lessons learned
• Coordinate major incidents with IT, business teams, communications, and legal
• Organize purple team exercises, attack simulations, end-to-end testing, and BCP/DRP tests
• Participate in the Cyber Crisis Management Team
• Manage the MSSP contract and relationship
• Lead service review committees and monitor improvement plans
• Challenge service quality and contribute to RFPs and reversibility scenarios
• Manage the program budget and optimize the cost/value ratio
• Define and monitor SOC KPIs and KRIs
• Produce dashboards for the CISO, executive management, and governance bodies
• Ensure compliance with NIS2, DORA, ISO 27001, and GDPR
• Prepare for and support audits relating to the program

Explore CSIRT Manager – Paris at Tiime. Review requirements and application details.