Cybersecurity Incident Response Officer

Cybersecurity Incident Response Officer Based in Warsaw, hybrid working (50/50) At least 3 years’ experience English mandatory About the Team Arval IT is an international IT organization, with a workforce of around 1 000 internal and external professionals located in several countries (France, UK, Netherlands and other). As part of our sourcing strategy, we are expanding our nearshoring capabilities by establishing a new Arval Technical Center (ATC) in Poland, within an existing business operations shared service center (Arval Competence Center Warsaw, ACCW). This Arval Technical Center plays a strategic role in the development of digital expertise, and internalization of key competencies currently handled by external partners. Arval Competence Center Warsaw is the latest initiative of the BNP Paribas group, which aims to develop competences and business services. Currently, ACCW employs over 90 people who, every day, in various languages, help Arval Group entities to efficiently serve Clients and Partners. In ACCW, solutions are being created that aim to streamline the customer and supplier verification processes. The center specializes, among others, in credit analyses and KYC analyses, and also performs tasks in the field of HR data administration and internal control. Arval Cybersecurity & IT Risks CoE (Center of Expertise) aims at: Providing guidance on IT security and ensuring its implementation (through the information system security policy), Assessing risks, threats and their consequences and draw up a prevention plan, Making all ARVAL employees aware of cyber security, Providing recommendations to project managers on the security of their applications and deciding to audit some of them if necessary. Managing Cybersecurity incident through a dedicated CSIRT team, integrated in BNP Paribas CSIRT global organization. Cybersecurity & IT Risks CoE team is composed of around 50 professionals, located today mainly in Rueil Malmaison France. Duties - Responsibilities We are looking for a skilled Cybersecurity Incident Response Officer to take part in the activities of the Computer Security Incident Response Team (CSIRT) Activities THE COLLABORATOR WILL BE INVOLVED IN SOME OR ALL OF THE FOLLOWING ACTIVITIES Incident handling and responses Investigations, including performing digital forensics Data leak protection Phishing identification Threat hunting campaigns Cyber threat intelligence production Vulnerability management Expertise and skills Business Skills IT Knowledge Digital Forensics Risk Monitoring Security Cybersecurity TRANSVERSAL SKILLS Analytical Thinking Adaptability Ability to collaborate / Teamwork Creativity & Innovation / Problem Solving Ability to Deliver / Results Driven Good interpersonal and communication skills COMMON BASE TOOLSmethodologies EDR (Tanium), Antivirus (Trellix), SIEM (Elastic Search) Netcraft, Virustotal, Ghidra, Symantec DLP Service Now CORE COMPETENCES AND EDUCATION Preferably a MSc in Information Security Fluent in English (written & verbal) Proven record as an incident handler or CTI analyst Proven experience in the field of digital forensics Detailed technical knowledge of tactics, techniques, and procedures leveraged by attackers Autonomy and capacity to deliver within a given timeframe Ability to function effectively in a matrix structure Interest in all aspects of security research and development Fluent in French would be a plus Holding one or several of the following certifications would be a plus: GREM, GCFA, Blue Team Level 1 (BTL1), Blue Team Level 2 (BTL2), Certified Red Team Expert (CRTE) or Certified Red Team Professional (CRTP) Poste-type and Location Arval Department: ACCW IT BNP Paribas Job type: Cybersecurity Incident Response Officer Location : based in the local country/regions (Poland) We inform you that Arval Service Lease Polska Sp. z o.o. and Arval Competence Centre - Arval Service Lease Polska Sp. z o.o. Branch in Warsaw have an internal procedure for reporting breaches of law and taking follow-up actions (Whistleblowing Procedure), which is available on the Arval Service Lease Polska Sp. z o.o. website: https://www.arval.pl/ogolne/whistleblowing