Publié il y a 7 jours
Cyber Incident Response Commander | CERT / SOC
@ Mantu
Montréal, Québec
En bref
Amaris Consulting is hiring a Cyber Incident Response Commander for the CERT of a global transport and logistics organisation. The role leads major security incidents from containment through reporting, maintains response plans and playbooks, and coordinates technical, business and legal teams across regions. Full-time, with 4 to 6 years of incident response, SOC or GRC experience required.
Responsabilités :
- Agir comme commandant d'incident pour les incidents de sécurité majeurs
- Coordonner les équipes techniques, métier, juridiques et communication
- Maintenir et améliorer les plans de réponse aux incidents et playbooks
- Préparer les preuves et la documentation pour les audits
Résumé des exigences :
- 4 à 6 ans en réponse aux incidents, CERT, SOC, SecOps ou GRC
- Expérience comme commandant d'incident
- Connaissance de NIST, ISO 27035 ou SANS
- Anglais professionnel
Outils et compétences
Source et dates
Type de source non vérifié · apify-linkedin
- Date publiée par l’employeur
- 2026-11-03
- Première détection par notre source
- 2026-11-10
- Mise à jour du dossier source
- 2026-11-10
Ces dates décrivent le dossier source, pas une vérification en direct du recrutement. Consultez l’offre originale.
Détails du poste
| Niveau | Intermédiaire |
| Domaine | Développement logiciel |
| Expérience | 4 an(s) et plus |
| Heures par semaine | 40 (estimé) |
| Déplacements | avion : minimes · route : aucun |
| Milieu de travail | Bureau, Chez les clients |
| Position | Surtout assis |
| Exigences physiques | physique faible · ordinateur élevé |
| Langues | English |
| Permis et certifications | GCFA, CIH, CISSP, CEH, ECSA, ITIL Foundation |
Résumé et détails rédigés par l’IA à partir de l’offre; l’offre de l’employeur fait foi.
Mantu
| Champ | Valeur |
|---|---|
| Offres sur Jobsy | 6 |
Cyber Incident Response Commander | CERT / SOC
Amaris Consulting is looking for a Cyber Incident Response Commander to join the CERT of a global transport and logistics organisation.
This is an intermediate-level opportunity for a cybersecurity professional with experience coordinating security incidents, maintaining response processes and working with technical and business stakeholders during high-pressure situations.
Key responsibilities
- Act as Incident Commander for significant information-security incidents.
- Assess incident severity and formally declare major incidents when required.
- Coordinate technical, business, legal and communication teams.
- Manage incidents through containment, mitigation, recovery and reporting.
- Prioritize forensic activities and ensure effective collaboration between response teams.
- Maintain and improve Incident Response Plans, procedures and playbooks.
- Adapt response plans to different scopes, including ships, regions and subsidiaries.
- Document lessons learned and recommend process improvements.
- Establish relationships between incidents and identify recurring patterns.
- Prepare evidence and documentation for internal and external audits.
- Participate in CERT projects, Cyber Defense Center activities and compliance initiatives.
- Work with international and offshore teams across different regions.
Profile
- 4 to 6 years of experience in Cyber Incident Response, CERT, SOC, SecOps or GRC.
- Ideally 5+ years in roles involving similar responsibilities.
- Experience acting as an Incident Commander during cybersecurity incidents.
- Knowledge of incident-response methodologies such as NIST, ISO 27035 or the SANS six-step process.
- Understanding of SOC operations, security tools and digital-forensics techniques.
- Experience writing and maintaining Incident Response Plans and playbooks.
- Ability to communicate cybersecurity incidents clearly to management and executives.
- Relevant certifications such as GCFA, CIH, CISSP, CEH, ECSA or ITIL Foundation are an asset.
- Strong analytical, communication and decision-making skills.
- Ability to remain calm and structured during crisis situations.
- Professional fluency in English.
- Experience in transport, shipping or logistics would be an advantage.
If you are an experienced cybersecurity professional who can lead complex incidents and help improve enterprise response capabilities, please send us your updated CV.
Journal
Visible seulement par vous. Conservé sur cet appareil, et dans votre compte une fois connecté.