Senior CSIRT Specialist

About Us

ERGO Technology & Services S.A. (ET&S S.A.) was established in January 2021 following the integration of ERGO Digital IT and Atena into one entity, leveraging both companies’ strengths and best practices. As a part of ERGO Technology & Services Management AG, the technology holding of ERGO Group AG, we support millions of internal and external customers with state-of-the-art IT solutions to everyday problems.

In October 2022, ET&S S.A. expanded its scope of operations by creating a Business Services unit to contribute in a new way to the growth of ERGO’s business. Acting as a co-partner and internal consultant, it adds non-IT value and supports the development of the entire ERGO Group, currently offering skills in reporting, analysis, actuarial, and input management. We are committed to fostering innovation and meeting the evolving needs of our clients worldwide.

Discover how we implement AI, IoT, Voice Recognition, Big Data science, advanced mobile solutions, and business-related services to anticipate and address our customers’ future needs.

How you will get the job done

• providing technical leadership for security incident investigations and technical response
• supporting lead responders with technical results and data
• defining technical requirements and conducting evidence acquisition tasks
• defining and application of containment strategies
• proposing and supporting rapid response actions
• driving remediation measures during security incident
• presenting technical results and recommendations from investigation
• tracking and managing the tasks performed by technical responders
• implementing improvements in the security incident lifecycle and introducing performance enhancements in response and resolution
• evaluating the security incident procedures and policies on a continuous basis
• creating technical overview
• identifying action during the whole security incident management process
• knowledge sharing and development of junior technical responders

Skills and experience you will need

• fluency in written and verbal English
• excellent communication and interpersonal skills
• more than 5 years of hands-on experience with hardware/software tools used in incident response, computer forensics, network security assessments
• deep knowledge in the IT & IT security area including network protocols, security technologies, security architecture, cyber security threats and vulnerabilities
• proven experience in cyber security incident management including but not limited to ransomware attacks, data breaches, and infrastructure compromise
• strong knowledge about threat landscape including APT groups and attack tactics, techniques, and procedures
• deep expertise in incident documentation, incident reporting and transforming technical information to senior management language
• understating of security risk and mitigation strategy for IT infrastructure
• strong knowledge about security processes, standards, and frameworks (SANS, NIST, etc.)
• strong ability to work in a multinational and complex environment
• ability to coordinate people in different locations and at different stakeholder levels
• ability to stay focused, keep calm and work under pressure
• strong analytical and problem-solving skills

Nice to have

• Bachelor or Master degree in IT/Business IT/Computer Science or similar area
• CISSP/ GCFA/ GCIA/ GCFE/ GNFA/ GREM/ GCIH/ CISM or similar certification
• scripting skills (Python, Visual Basic, Bash,  Powershell, etc.)