Incident Response and Forensics Senior Associate

* This is an international staff role based at our Headquarters in Washington, D.C. We offer visa and relocation support.

The IDB Group is a community of diverse, versatile, and passionate people who come together on a journey to improve lives in Latin America and the Caribbean. Our people find purpose and do what they love in an inclusive, collaborative, agile, and rewarding environment.

We are looking for a dynamic and detail-oriented Incident Response and Forensics Senior Associate. You will work in the Cybersecurity Team, part of the Technology and Transformation Department, with a group of security-minded and enthusiastic team players who provide technical advice, set security standards, perform vulnerability assessments, address challenges, and participate in the development of robust security baselines and processes for cloud and on-premises solutions.

• Coordinate the cyber incident detection and triage of security alerts, including monitoring of security alerts, identifying potential security incidents, performing initial triage, assessing severity, and escalating appropriately.
• Coordinate incident response management across internal and external teams: manage and support coordinated response actions with the managed security service provider, contain threats, eradicate malicious activity, and support recovery efforts in line with the Bank’s incident response framework.
• Perform digital forensics exercises, evidence collection and handling, and eDiscovery:
  Collect, preserve, analyze, and document digital evidence in a forensically sound manner while maintaining chain of custody for potential legal or regulatory proceedings.
• Threat analysis and reporting:
  Conduct root-cause analysis, identify attack vectors, produce detailed incident reports, and recommend corrective and preventive measures.
• Ensure investigations and response activities comply with relevant internal regulations, policies, and industry standards.
  
  Continuous improvement and preparedness: support tabletop exercises, updating playbooks, enhancing detection rules, and providing training or awareness to improve the Bank’s overall security posture.
• Serve as a technical focal point for guidance to junior staff and other personnel
• Communicate effectively with technical and non-technical stakeholders, including senior management.

• Education:
• Master’s degree (or equivalent advanced degree) in Mathematics, Computer Science, Telecommunications, or other fields relevant to the responsibilities of the role. In lieu of a Master's degree, a Bachelor's degree may be considered.
• Any of the following certifications will be an asset: GIAC Certified Forensic Analyst (GCFA), SANS 508, Certified Red Team Professional (CRTP), Offensive Security Certified Professional (OSCP), Certified Ethical Hacker (CEH), Certified Information Systems Security Professional (CISSP), GIAC GWAPT, CISA, CISM, CRISC.
• Experience:
  
  At least 3 years with a Master's degree and at least 6 years with a Bachelor's degree, of progressive experience in cybersecurity, digital forensics, Security Operations Center (SOC), Computer Emergency Response Team (CERT), information risk management or infrastructure security operations.
• Languages:
  
  Proficiency in English is required and one of the other Bank official languages (Spanish, French or Portuguese) is a plus.

• Citizenship:
  You are a citizen of one of our 48-member countries. We may offer assistance with relocation and visa applications for you and your eligible dependents.
• Consanguinity:
  You have no family members (up to the fourth degree of consanguinity and second degree of affinity, including spouse) working at the IDB, IDB Invest, or IDB Lab.