Incident Response and Forensics Senior Associate

Job Posting Organization:
The IDB Group is a community dedicated to improving lives in Latin America and the Caribbean. Established with a mission to foster sustainable development and economic growth, the organization comprises a diverse team of passionate individuals who work collaboratively in an inclusive and agile environment. The IDB Group operates across multiple countries in the region, focusing on various sectors to enhance the quality of life for its citizens. The organization values diversity and aims to create a workplace where everyone can thrive and contribute meaningfully to its mission.

Job Overview:
The Incident Response and Forensics Senior Associate will play a crucial role within the Cybersecurity Team, which is part of the Technology and Transformation Department. This position requires a dynamic and detail-oriented individual who will be responsible for coordinating cyber incident detection and triage of security" style="border-bottom: 1px dotted #007bff !important;">security alerts. The associate will monitor security alerts, identify potential security incidents, perform initial triage, assess severity, and escalate issues as necessary. Additionally, the role involves managing incident response across internal and external teams, supporting coordinated response actions with managed security service providers, containing threats, eradicating malicious activities, and aiding recovery efforts in accordance with the Bank's incident response framework. The associate will also conduct digital forensics exercises, collect and handle evidence, and perform eDiscovery while maintaining the chain of custody for potential legal or regulatory proceedings. Furthermore, the role includes conducting threat analysis, producing detailed incident reports, and recommending corrective and preventive measures to ensure compliance with internal regulations and industry standards. Continuous improvement and preparedness are also key aspects of this position, as the associate will support tabletop exercises, update playbooks, enhance detection rules, and provide training to improve the Bank's overall security posture. Effective communication with both technical and non-technical stakeholders, including senior management, is essential for success in this role.

Duties and Responsibilities:
The duties and responsibilities of the Incident Response and Forensics Senior Associate include:

• Coordinating the detection and triage of cyber incidents by monitoring security alerts and identifying potential security incidents.
• Performing initial triage of incidents, assessing their severity, and escalating them appropriately.
• Managing incident response efforts across internal and external teams, including coordinating with managed security service providers.
• Containing threats and eradicating malicious activities while supporting recovery efforts in line with the Bank's incident response framework.
• Conducting digital forensics exercises, including evidence collection, preservation, analysis, and documentation in a forensically sound manner.
• Maintaining the chain of custody for digital evidence for potential legal or regulatory proceedings.
• Conducting root-cause analysis and identifying attack vectors to produce detailed incident reports.
• Recommending corrective and preventive measures based on findings from investigations.
• Ensuring that investigations and response activities comply with relevant internal regulations, policies, and industry standards. 1
• Supporting continuous improvement initiatives, including tabletop exercises, updating playbooks, and enhancing detection rules. 1
• Providing training and awareness to improve the Bank's overall security posture. 1
• Serving as a technical focal point for guidance to junior staff and other personnel. 1
• Communicating effectively with both technical and non-technical stakeholders, including senior management.

Required Qualifications:
The required qualifications for the Incident Response and Forensics Senior Associate position include:

• A Master’s degree (or equivalent advanced degree) in Mathematics, Computer Science, Telecommunications, or other relevant fields. In lieu of a Master's degree, a Bachelor's degree may be considered.
• Relevant certifications such as GIAC Certified Forensic Analyst (GCFA), SANS 508, Certified Red Team Professional (CRTP), Offensive Security Certified Professional (OSCP), Certified Ethical Hacker (CEH), Certified Information Systems Security Professional (CISSP), GIAC GWAPT, CISA, CISM, or CRISC will be considered an asset.
• Strong analytical and problem-solving skills, with the ability to think critically and make decisions under pressure.
• Excellent communication skills, both verbal and written, to effectively convey technical information to diverse audiences.

Educational Background:
The educational background required for this position includes a Master’s degree in a relevant field such as Mathematics, Computer Science, or Telecommunications. Alternatively, a Bachelor's degree may be accepted if accompanied by sufficient experience. The candidate should possess a strong foundation in cybersecurity principles, digital forensics, and incident response methodologies.

Experience:
Candidates should have at least 3 years of progressive experience in cybersecurity, digital forensics, Security Operations Center (SOC), Computer Emergency Response Team (CERT), information risk management, or infrastructure security operations if they hold a Master’s degree. For those with a Bachelor's degree, a minimum of 6 years of relevant experience is required. This experience should demonstrate a solid understanding of incident response processes, digital forensics techniques, and security operations.

Languages:
Proficiency in English is mandatory for this position. Additionally, knowledge of one of the other official languages of the Bank, such as Spanish, French, or Portuguese, is considered a plus and may enhance the candidate's profile.

Additional Notes:
The position is offered as an international staff contract for an initial duration of 36 months, with the possibility of renewal upon mutual agreement. Candidates must be citizens of one of the 48 member countries of the IDB Group. The organization may provide assistance with relocation and visa applications for the candidate and their eligible dependents. Furthermore, the IDB Group offers a competitive compensation package, including an annual base salary on a net-of-tax basis, generous leave policies, comprehensive health insurance, a defined benefit pension plan, and various employee benefits aimed at supporting work-life balance and professional development. The IDB Group also promotes a hybrid and flexible work schedule, ensuring that employees can manage their personal and professional commitments effectively.