Csirt Team Lead

**Role and Responsibilities** Incident Response Lead Are you looking for a work environment where you can innovate, reach greater heights and collaborate with experts from a wide range of sectors? You want to join a world-class company and industry leader with projects to which you would be proud to contribute? Come share your passion with us **The role we are offering you**: We are seeking a Incident Response Lead to join our Security team supporting our global network. The Incident Response Lead will work collaboratively to lead and define the Incident Response program. Additional responsibilities include detection and responding to security incidents, maintain and follow procedures for security event alerting, and participate in security investigations. Are you ready to: - Lead the Incident Response Process - Owns the critical process steps - detection, validation, containment, remediation, and communication - for computer-based security events and incidents such as malware infections, potential compromise, Distributed Denial of Service (DDoS), etc. - CSIRT Team Lead - Respond to critical security incidents and lead escalation teams to close with response, containment and remediation. - Security Operations Playbooks - Create, maintain and promote a set of security operation playbooks - Support the security team by contributing to the resolution of computer security incidents - Act as an expert in security incident response within the security operations team - Analyze security alerts from various security monitoring tools & platforms - Perform triage, assess the scope of threats and escalate as necessary - Develop the team’s response capabilities to all types of cyber security incidents - Security Incident Management: Investigate, analyze, coordinate and report on all security events, incidents and intrusions; track incidents through analysis, diagnosis, correction and resolution - Other activities as they relate to improving the firm’s posture towards cyber security incident response - Security Assessments: Perform periodic network security assessments and review for evidence of vulnerability or compromise, and assist or coordinate mitigation and remediation - Research: Assist in the study of vendors and technology for network and desktop security to determine those which best meet the needs of the organization - Subject Matter Expert: Serve as an expert technical resource, to advise and assist in security issues, both proactively and reactively - Ensure the integrity of data and systems, security of confidential information, and protection of physical property - Collaborate with multiple cross-functional IT teams as well as non-IT business units as required - University degree, technical degree or relevant work experience - 2+ years in an incident response role. - Deep knowledge of Operating Systems, Network infrastructure and IT Security solutions - Working knowledge of incident management, case management and investigation practices - Demonstrated experience supporting and leading investigations - Demonstrated experience developing incident run books - Excellent facilitation and communication skills - ability to coordinate and develop communication outside the team - Ability to provide coverage and willingness to support a flexible work schedule - Proactive, accountable, self-directed, humble and solution oriented - Strong critical thinking and analysis skills - Scripting knowledge such as Python, PowerShell, etc. **Position Type** Regular CAE thanks all applicants for their interest. However, only those whose background and experience match the requirements of the role will be contacted. **Equal Employment Opportunity** At CAE, everyone is welcome to contribute to our success. With no exception. As captured in our overarching value "One CAE", we’re proud to work as one passionate, boundaryless and inclusive team. At CAE, all employees are welcome regardless of race, nationality, colour, religion, sex, gender identity or expression, sexual orientation, disability, neurodiversity or age.