Senior Incident Response Engineer

Senior Incident Response Engineer

Sinch's vision is to connect every business with every customer, everywhere in the world. More than 200,000 businesses — including Google, Uber, Paypal, Visa, Tinder, and many others — rely on Sinch's Customer Communications Cloud to power engaging customer experiences through mobile messaging, voice, and email.

Whether you need to verify users or craft omnichannel campaigns, Sinch makes it easy. Our AI-infused Super Network, APIs, and applications ensure you can connect with your customers reliably and securely, at every step of their journey.

At Sinch we "Dream Big", "Win Together", "Keep it simple", and "Make it Happen". These values are our foundation!

The Senior Incident Response Engineer is a senior technical expert responsible for leading and executing the most complex and high-impact incident response activities within the organization. This role involves coordinating large-scale incident response efforts, performing advanced threat hunting, and providing expert guidance on incident containment, eradication, and recovery.

You will collaborate with internal and external stakeholders to enhance the organization's incident response capabilities and overall security posture.

Key responsibilities include:

• Advanced incident response
• Lead the response to critical and high-severity security incidents, coordinating efforts across multiple teams and external partners as needed.
• Perform advanced forensic analysis, reverse engineering of malware, and deep-dive investigations to identify the root cause of incidents.
• Develop and implement containment, eradication, and recovery strategies to minimize the impact of security incidents.
• Threat hunting & intelligence
• Conduct proactive threat hunting to identify and mitigate potential security threats before they can cause harm to the organization.
• Analyze threat intelligence from various sources to inform incident response efforts and improve detection capabilities.
• Develop and refine threat-hunting techniques, tools, and methodologies to stay ahead of emerging threats.
• Leadership & mentorship
• Provide expert guidance and mentorship to junior incident response engineers, helping to develop their technical skills and knowledge.
• Lead incident response exercises and simulations to prepare the team for real-world scenarios.
• Serve as a technical advisor to management and other departments on matters related to incident response and threat management.
• Incident response strategy & process improvement
• Contribute to the development and refinement of incident response playbooks, processes, and procedures to improve efficiency and effectiveness.
• Identify and implement process improvements and automation opportunities within the incident response workflow.
• Collaborate with the SOC and other security teams to integrate incident response strategies into broader security operations.
• Collaboration & communication
• Work closely with IT, Legal, Compliance, and other departments to ensure a coordinated and comprehensive approach to incident management.
• Communicate effectively with senior management and stakeholders regarding the status, impact, and resolution of security incidents.
• Engage with external partners, such as law enforcement and industry groups, during significant security events.
• Documentation & reporting
• Maintain detailed documentation of incident response activities, including forensic analysis, evidence collection, and lessons learned.
• Prepare comprehensive reports on security incidents, including root cause analysis, impact assessment, and recommendations for improvement.
• Present findings to executive leadership and other stakeholders, providing clear and actionable insights.
• Continuous learning & innovation
• Stay current with the latest cybersecurity threats, trends, tools, and best practices to continuously enhance incident response capabilities.
• Experiment with and adopt new technologies and techniques to improve the organization's ability to detect and respond to security incidents.
• Participate in industry conferences, training, and certifications to maintain expertise in incident response and related fields.

Requirements:

• 7+ years of cybersecurity…