Description
Ubisoft is a global leader in gaming with teams across the world creating original and memorable gaming experiences, from Assassin’s Creed, Rainbow Six, to Just Dance and more.
As an Incident Response Security Analyst, you will work in coordination with all production and services teams, and other security relays to ensure the coherent execution of the Ubisoft security strategy.
Responsibilities
- Analyze and respond to alerts generated by our SIEM (Security Information and Events management) and other security tool suite (EDR, Identity service, etc.) on a day-to-day basis
- Perform forensic and investigation activities on hosts, network, infrastructure and applications targeted by threat actors
- Identify attacker tactics, techniques, and procedures and proactively hunt for threats based on intelligence and hypothesis
- Lead incident response activities end-to-end for incidents of low and medium criticality
- Support and coordinate incident response activities for high and critical incidents
- Drive decision-making processes under pressure to determine incident handling approaches
- Produce clear investigation reports for technical and non-technical audiences
- Validate and enrich detection by collaborating with the detection engineering team and propose alert tuning strategies and implementations
- Participate in the creation and implementation of incident response plans
- Occasionally participate in internal investigations
- Collaborate on threat intelligence activities by performing relevant and efficient analyses and reporting back findings
- Propose solutions to mitigate identified risks and bring them to an acceptable level for management
Qualifications
- Bachelor's Degree in Computer Sciences or any related discipline
- 2+ years in operating system administration and/or network administration
- 2+ years in audit and/or incident response and/or monitoring
- 2+ years in other security-related functions
- 1+ year in managing SIEM, IDS/IPS, EDR/XDR solutions in a fast-paced environment
- Hands-on experience in incident response and coordination
- SANS GIAC certification is a strong asset
Knowledge & Skills
- Ability to work under pressure and adapt quickly to change
- Good problem-solving skills
- Ability to manipulate sensitive information
- Ability to analyze and summarize complex data
- Effectively collaborate with a variety of stakeholders
- Proactive, methodic, and result-oriented
- Solid business understanding
- Ability to write clear and concise documentation
- Adapt quickly to change
- English & Mandarin is required (Written and verbal communication)
- French language is an asset
- Interpersonal and negotiation skills