Senior Incident Response Engineer

3 settimane fa

Milano, Italia Microsoft A tempo pieno

Interested in security and incident response? Then come join the Cybersecurity Incident Response Team (CIRT) at Microsoft as a Senior Incident Response Engineer responsible for helping customers investigate security incidents in their environment.

As a Senior Incident Response engineer, you will be an elite member of a customer-facing security support team leading incident response investigations for Microsoft’s enterprise customers. You have experience in analysing, triaging, scoping, containing, providing guidance for remediation, and determining the root cause of security incidents. You are familiar with collecting and analysing security incident related data to identify indicators of attack and compromise.


In the Customer Service & Support (CSS) team, we are looking for people with a passion for delivering customer success. As a Senior Incident Response Engineer, you will own, troubleshoot and solve highly complex customer technical issues. This opportunity will allow you to accelerate your career growth by honing your problem-solving, collaboration and research skills, and developing your technical proficiency.


This role is flexible in that you can work up to 100% from home.

Responsibilities

Responsibilities:

  • Scope customer security incidents
  • Understand and identify indicators of attack and indicators of compromise
  • Analyse incident data from threat analytics tools
  • Collaborate with the Security and Threat Intelligence teams by providing indicators of compromise and samples of malware from the customer’s environment
  • Coordinate a response to the security incident with other Microsoft security and consulting teams.
  • Develop, document, and implement runbooks, capabilities, and techniques for Incident Response
  • Perform security triage and analysis on endpoint, server and network infrastructure.
  • Perform activities necessary for immediate containment and short-term resolution of incidents.
  • Maintain current knowledge and understanding of the threat landscape, emerging security threats, and vulnerabilities
  • Investigate root cause of complex security incidents
  • Maintain a high level of confidentiality
  • Participate in the on-call rotation as required

Qualifications

Required/Minimum Qualifications (RQs/MQs)

  • Native or excellent written and spoken Italian language skills
  • Minimum 2+ years Security Incident Response experience with recent operational security experience (SOC, Malware Analysis, IDS/IPS Analysis, threat analytics, windows server, and endpoint security, etc.)
  • Minimum 2+ years Cloud investigations experience with Entra ID, Microsoft 365 and Microsoft Defender solutions
  • Minimum 1+ years customer facing experience
  • Experience supporting large and complex geographically distributed enterprise environments with 1000+ users
  • Minimum 1+ years of experience in Network Security Administration, and/or Systems Administration with experience in Windows Server, Windows Client, and Active Directory Administration
  • Bachelor's degree in Computer Science, Information Technology (IT), or related field AND 5+ years of technical support, technical consulting experience, or information technology experience

Additional or Preferred Qualifications (PQs)

  • Experience in Entra ID and Microsoft 365 management and troubleshooting
  • Experience with any Microsoft Defender solutions
  • Experience in Azure Identity management and troubleshooting
  • Kusto Query Language knowledge
  • Cloud experience with any of the major cloud providers, including cloud security, networking, and migration of multi-cloud or hybrid deployments
  • Automation (PowerShell and/or Python, Java, or a similar language, can be a beginner to intermediate level).
  • Preferred IT Industry certifications (Microsoft Certifications On-Prem or Cloud, SANS GCIH, CISSP, CEH, Amazon AWS, etc.)
  • Preferred Bachelor’s degree or higher in a technical field, or relevant work experience
  • Experience in Linux and/or Mac administration

Language Qualification

Italian Language: fluent in reading, writing and speaking.

English Language: fluent in reading, writing and speaking.


Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include, but are not limited to the following specialized security screenings: Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud Background Check upon hire/transfer and every two years thereafter.

Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable laws, regulations and ordinances.

#J-18808-Ljbffr

  • Senior Incident Response Engineer

    1 giorno fa

    Milano, Italia Microsoft A tempo pieno

    Interested in security and incident response? Then come join the Cybersecurity Incident Response Team (CIRT) at Microsoft as a Senior Incident Response Engineer responsible for helping customers investigate security incidents in their environment. As a Senior Incident Response engineer, you will be an elite member of a customer-facing security support team...

  • Senior Incident Response Engineer

    3 settimane fa

    Milano, Italia Microsoft A tempo pieno

    Interested in security and incident response? Then come join the Cybersecurity Incident Response Team (CIRT) at Microsoft as a Senior Incident Response Engineer responsible for helping customers investigate security incidents in their environment. As a Senior Incident Response engineer, you will be an elite member of a customer-facing security support team...

  • Senior Incident Response Engineer

    1 settimana fa

    Milano, Italia Buscojobs A tempo pieno

    Interested in security and incident response?Then come join the Cybersecurity Incident Response Team (CIRT) at Microsoft as a Senior Incident Response Engineer responsible for helping customers investigate security incidents in their environment.As a Senior Incident Response engineer, you will be an elite member of a customer-facing security support team...

  • Senior Incident Response Engineer

    3 settimane fa

    Milano, Italia Microsoft A tempo pieno

    Interested in security and incident response? Then come join the Cybersecurity Incident Response Team (CIRT) at Microsoft as a Senior Incident Response Engineer responsible for helping customers investigate security incidents in their environment. As a Senior Incident Response engineer, you will be an elite member of a customer-facing security support team...

  • Senior Incident Response Engineer

    3 settimane fa

    Milano, Italia Microsoft A tempo pieno

    Interested in security and incident response?Then come join the Cybersecurity Incident Response Team (CIRT) at Microsoft as a Senior Incident Response Engineer responsible for helping customers investigate security incidents in their environment.As a Senior Incident Response engineer, you will be an elite member of a customer-facing security support team...

  • Senior Incident Response Engineer

    1 settimana fa

    Milano, Italia Buscojobs A tempo pieno

    Interested in security and incident response? Then come join the Cybersecurity Incident Response Team (CIRT) at Microsoft as a Senior Incident Response Engineer responsible for helping customers investigate security incidents in their environment.As a Senior Incident Response engineer, you will be an elite member of a customer-facing security support team...

  • Senior Incident Response Engineer

    3 settimane fa

    Milano, Italia Microsoft A tempo pieno

    Interested in security and incident response? Then come join the Cybersecurity Incident Response Team (CIRT) at Microsoft as a Senior Incident Response Engineer responsible for helping customers investigate security incidents in their environment.As a Senior Incident Response engineer, you will be an elite member of a customer-facing security support team...

  • Senior Incident Response Engineer

    3 settimane fa

    Milano, Italia Microsoft A tempo pieno

    Interested in security and incident response? Then come join the Cybersecurity Incident Response Team (CIRT) at Microsoft as a Senior Incident Response Engineer responsible for helping customers investigate security incidents in their environment. With over 18,000 employees worldwide, the Microsoft Customer Experience & Success (CE&S) organization is...

  • Senior Incident Response Engineer

    3 settimane fa

    Milano, Italia Microsoft A tempo pieno

    Interested in security and incident response? Then come join the Cybersecurity Incident Response Team (CIRT) at Microsoft as a Senior Incident Response Engineer responsible for helping customers investigate security incidents in their environment.With over 18,000 employees worldwide, the Microsoft Customer Experience & Success (CE&S) organization is...

  • Senior Incident Response Engineer

    3 settimane fa

    Milano, Italia Microsoft A tempo pieno

    Interested in security and incident response? Then come join the Cybersecurity Incident Response Team (CIRT) at Microsoft as a Senior Incident Response Engineer responsible for helping customers investigate security incidents in their environment. With over 18,000 employees worldwide, the Microsoft Customer Experience & Success (CE&S) organization is...

  • Incident Response

    1 settimana fa

    Milano, Italia Intesa Sanpaolo A tempo pieno

    Candidati ora » - Avvia la candidatura con LinkedIn - Candidati - Attendi...Incident Response Data: 1 dic 2024 Località: Milano, IT Società: Intesa Sanpaolo S.p.A. Intesa Sanpaolo è un gruppo bancario internazionale, leader in Italia e fra i primi 5 gruppi dell'area euro con oltre 20 milioni di clienti in Italia e all'estero.Estremamente innovativo è...

  • Incident Response

    1 settimana fa

    Milano, Italia Intesa Sanpaolo A tempo pieno

    Candidati ora »- Avvia la candidatura con LinkedIn- Candidati- Attendi...Incident ResponseData: 1 dic 2024Località:Milano, ITSocietà: Intesa Sanpaolo S.p.A.Intesa Sanpaolo è un gruppo bancario internazionale, leader in Italia e fra i primi 5 gruppi dell'area euro con oltre 20 milioni di clienti in Italia e all'estero. Estremamente innovativo è anche...

  • Incident & Threat Response Specialist

    2 mesi fa

    Milano, Italia Agm Solutions Srl A tempo pieno

    AGM Solutions si occupa di studiare ed implementare soluzioni tecnologiche ed innovative offrendo servizi per ICT Governance, ICT Security & GDPR Compliance.Siamo un'azienda certificata Great Place To Work.Siamo alla ricerca, per un nostro cliente su Milano, di un* Incident & Threat Response Specialist altamente qualificato, con esperienza in diverse...

  • Incident & Threat Response Specialist

    2 settimane fa

    Milano, Italia Agm Solutions Srl A tempo pieno

    AGM Solutions si occupa di studiare ed implementare soluzioni tecnologiche ed innovative offrendo servizi per ICT Governance, ICT Security GDPR Compliance.Siamo un'azienda certificata Great Place To Work.Siamo alla ricerca, per un nostro cliente su Milano, di un* Incident Threat Response Specialist altamente qualificato, con esperienza in diverse discipline...

  • Incident & Threat Response Specialist

    1 settimana fa

    Milano, Italia Agm Solutions Srl A tempo pieno

    AGM Solutions si occupa di studiare ed implementare soluzioni tecnologiche ed innovative offrendo servizi per ICT Governance, ICT Security & GDPR Compliance.Siamo un'azienda certificata Great Place To Work.Siamo alla ricerca, per un nostro cliente su Milano, di un* Incident & Threat Response Specialist altamente qualificato, con esperienza in diverse...

  • Incident & Threat Response Specialist

    4 settimane fa

    Milano, Italia Agm Solutions Srl A tempo pieno

    AGM Solutions si occupa di studiare ed implementare soluzioni tecnologiche ed innovative offrendo servizi per ICT Governance, ICT Security & GDPR Compliance. Siamo un'azienda certificata Great Place To Work . Siamo alla ricerca, per un nostro cliente su Milano, di un* Incident & Threat Response Specialist altamente qualificato, con esperienza in diverse...

  • Incident & Threat Response Specialist

    4 settimane fa

    Milano, Italia AGM SOLUTIONS SRL A tempo pieno

    AGM Solutions si occupa di studiare ed implementare soluzioni tecnologiche ed innovative offrendo servizi per ICT Governance, ICT Security & GDPR Compliance. Siamo un’azienda certificata Great Place To Work . Siamo alla ricerca, per un nostro cliente su Milano, di un* Incident & Threat Response Specialist altamente qualificato, con esperienza in diverse...

  • Incident & Threat Response Specialist

    2 mesi fa

    Milano, Italia AGM SOLUTIONS SRL A tempo pieno

    AGM Solutions si occupa di studiare ed implementare soluzioni tecnologiche ed innovative offrendo servizi per ICT Governance, ICT Security & GDPR Compliance. Siamo un’azienda certificata Great Place To Work , Siamo alla ricerca, per un nostro cliente su Milano, di un* Incident & Threat Response Specialist altamente qualificato, con esperienza in diverse...

  • Incident & Threat Response Specialist

    2 mesi fa

    Milano, Italia Agm Solutions Srl A tempo pieno

    AGM Solutions si occupa di studiare ed implementare soluzioni tecnologiche ed innovative offrendo servizi per ICT Governance, ICT Security & GDPR Compliance. Siamo un'azienda certificata Great Place To Work , Siamo alla ricerca, per un nostro cliente su Milano, di un* Incident & Threat Response Specialist altamente qualificato, con esperienza in diverse...

  • Incident Responder

    6 mesi fa

    Milano, Italia Buckler A tempo pieno

    **Buckler - Cyber Defence**. Individuiamo i professionisti più qualificati in ambito Cyber Defence. The Company: **Posizione**: The Role: - Identificare, analizzare e mitigare incidenti di sicurezza informatica; - Sviluppare, implementare e valutare le procedure relative alla gestione degli incidenti informatici all'interno di una struttura SOC; -...