Senior CSIRT Analyst (all genders)

at  Zalando

THE ROLE & THE TEAM

Security Incidents have a high potential to cause a severe business impact on the organization. They often involve ambiguity, complexity, and the need for off-playbook approaches and solutions to manage unprecedented problems. Flexibility, fast movement, and the ability to reduce complex situations to individual components to allow action-taking are key during such situations.
The Senior CSIRT Analyst coordinates task forces to respond to major Information Security Incidents. They act as a primary point of contact for all parties involved and contain, eradicate, and recover Information Security Incidents.
Most of their time, they will work during core business hours but also regularly on-call outside of business hours and on weekends.
Most of their time, they will work during core business hours but also regularly on-call outside of business hours and on weekends.

WHAT WE’D LOVE YOU TO DO (AND LOVE DOING)

• Drive Incident response activities together with a task force through the entire Security Incident Lifecycle;
• Coordinate the investigation activities of involved Cybersecurity Analysts;
• Partner with engineering teams and other on-call staff to drive the investigation and response and facilitate swift decision-making;
• Interact with platform partners on 3rd party Incidents to evaluate the potential impact on Zalando;
• Steer stakeholder communication on the highest level, keeping stakeholders in a close loop and serving as the primary point of contact throughout the entire Incident Response Lifecycle; You interact directly with senior executives, equipping them with critical information required for swift decision-making;
• When not managing Incidents, you continuously improve our monitoring coverage, respond to security alerts, and design and execute tabletop exercises to ensure all CSIRT members and Stakeholders understand their roles and can execute their responsibilities during an Incident.