Incident Manager - Cyber

Join Maersk's groundbreaking Cyber Team: Redefining Incident Management & Response

Imagine a career where you're not just responding to security incidents-you're revolutionising how it's done. At Maersk, one of the world's largest and most respected logistics and shipping companies, our Cyber team is pioneering a whole new approach to incident response. This isn't your typical SOC/CERT role: our combined fire team approach is built on cutting-edge research and designed to drive change, resilience, and agility in ways the industry has never seen before.

Here, you'll be part of a dynamic team that works together to defend, adapt, and innovate with freedom and purpose. You won't just work on Incident Management; you'll help improve how it's done. Dive into purple teaming, create and refine world-class detections, shape change projects, and push the boundaries of what's possible-all during the workday with no overnight shifts. Plus, we champion continuous learning and growth through Capture the Flag (CTF) exercises and direct opportunities to bring your ideas to life.

Are you ready to be part of something transformational at Maersk and join a team that's setting a new standard in cybersecurity?

• Join a World-Class Cyber Team: Be part of an elite cyber operation at one of the globe's most renowned logistics companies, where your contributions truly make a difference.
• Multidimensional role to Keep You Engaged: Unlike any traditional SOC role, as a CERT analyst in Maersk, you'll engage in a variety of activities, switching between defensive and offensive strategies, conducting threat hunts, and participating in innovative projects and research.
• Continuous Learning & Dynamic Environment: Enjoy ongoing training and development in a fast-paced, stimulating atmosphere. Participate in exciting CTF competitions alongside a team of experts.
• Using cutting-edge technologies: Tackle complex cyber incidents that require innovative solutions and utilize the latest technologies available in the market.
• Innovate and Impact: Engage in innovative projects that allow you to bring your ideas to life, helping shape the future of cybersecurity.

About the role:

Incident Response and Leadership

• Lead incident management activities in response to high-priority cyber-security incidents, remaining calm and focused during crisis situations.
• Manage conflicting priorities and multiple tasks in a high-pressure environment.
• Strong leadership skills to motivate and manage response teams during high-pressure situations.
• Co-ordinate resources across the organisation to develop and execute response plans that ensure cyber-security incidents are managed effectively.
• Communicate effectively with internal stakeholders, including senior leadership, providing rapid and concise summaries of complex situations.
• Deliver and co-ordinate Post Incident activities, including producing detailed incident reports and conducting Post Incident Reviews.
• Contribute to and participate in cyber-security incident readiness activities, including simulations and tabletop exercises.

Continuous Improvement

• Identify gaps and continuously improve detection and response capabilities by creating and fine-tuning use cases, developing automation, and documenting processes and playbooks.
• Identify lessons learned to improve future incident response and detection strategies.
• Contribute to the development of detection mechanisms for sophisticated adversarial techniques based on the MITRE ATT&CK framework.

Purple Teaming and Advanced Testing

• Support the planning and response of purple teaming activities.
• Develop scenarios and artifacts that mimic real-world adversary groups for simulated testing.

Leadership and Team Development

• Mentor and coach a multidisciplinary team of analysts and investigators from a technical perspective.
• Contribute to CTF exercises or similar initiatives to maintain continuous development of team skills.
• Champion new processes and run coaching sessions to cross-skill team members.
• Assist the leadership team with quality control and feedback reviews.
• Develop training materials and deliver training as part of the team's continuous development.
• Conduct and lead Cyber Incident Response exercises.

Soft Skills:

• Operations Management & Issue Resolution: Ensure smooth operations and continuity by proactively identifying and addressing operational issues.
• Report Writing: Ability to write reports that convey highly technical information while remaining accessible to a non-technical audience.
• Communication: Exhibit excellent written/verbal communication skills, developing documentation and explaining technical details concisely.
• Mentorship: Train and guide junior team members, promoting a culture of knowledge sharing and continuous learning.
• Critical Thinking, Adaptability & Problem-Solving: Strong analytical skills and flexibility to adapt to changing priorities and emerging cybersecurity threats.
• Time Management & Organization: Prioritize tasks efficiently and maintain organized documentation and processes.
• Teamwork & Positive Attitude: Foster a collaborative environment where team members feel supported.

Qualifications:

• 5+ years of experience in an Incident Management role, with a minimum of 3 years in a SOC or incident response leadership role.
• Relevant advanced certifications (e.g., GCIA, GSEC, CEH, GCDA, GCIH, GCFA, OSCP) are highly desirable.
• Proven self-learning abilities demonstrated through research, GitHub projects, or active participation in public cybersecurity forums.

Bonus Points:

• Knowledge of reverse engineering tools and processes is desirable.
• Some programming experience (e.g., C, Python, Go) is desirable.
• Assembly language knowledge is a plus.
• Development and deployment of dockerized applications is desirable.
• Experience with multiple platforms (Linux, MacOS, mobile) is a plus.
• A background in intelligence is a plus.
• Knowledge of scripting languages (e.g., Bash, Python, PowerShell) for automation is desirable.

Company Benefits:

• Flexible working arrangement: Remote working with occasional in-person team building activities.
• Collaborative Culture: Experience a supportive and inclusive work environment that values teamwork and innovation.
• Work-Life Balance: Our flexible working arrangements and supportive policies enable you to excel in your role while enjoying your personal life.