Job detail for Incident Response Specialist

.

Overview

In the Incident Response team, you will be responsible for independently managing cyber security incident response activities, coordinating with specific technical functions and essential Bank functions to resolve events across various involved areas, from technical and operational aspects to business impacts, operational continuity, and regulatory compliance. You will contribute to post-incident analysis and incident readiness activities.

What your activities will be

• Coordinate technical analysis, containment, mitigation, recovery, and restoration activities, monitoring their effectiveness and progress
• Support incident management with impacts on Business Continuity and forensic analysis on the involved assets
• Ensure incident tracking and reporting to stakeholders and top management, coordinating with internal functions and external counterparts and Authorities
• Contribute to the continuous improvement of Incident Response processes through lessons learned and post-incident analysis, identifying risk scenarios also through Cyber Threat Intelligence

Who we are looking for

If you have the following characteristics, we are waiting for you:

• 3-5 years of experience in Incident Response and Cybersecurity
• STEM degree and excellent knowledge of English
• Solid experience in Incident Response, CSIRT, or SOC teams, preferably in the financial sector
• Advanced skills in cyber threats, TTP, MITRE ATT&CK, Cyber Kill Chain, and Incident Response methodologies (NIST, ENISA, CISA)
• Knowledge of main security systems, forensic tools, and IT infrastructures
• Experience in managing complex incidents, log analysis, digital forensics, and threat hunting
• Knowledge of cyber regulations, including GDPR and DORA, and scripting/programming languages (e.g., Python, C, C++, Java)
• Analytical skills, problem-solving, communication, resilience, and aptitude for working under pressure
• Certifications such as CERT CSIH, CISSP, GCIH, GFCA, GREM, GCIA are preferred

What we offer you

• Gross annual salary starting from €40.000

• The Group provides a variable component of remuneration as regulated by the Remuneration Policies available on the Group website

• Complementary elements regulated by the National Collective Labor Agreement for the Credit Sector and second-level company agreements

• Professional development initiatives to support the growth of our people

• Extensive training offer through the Corporate Academy dedicated to the continuous development of professional, managerial, and transversal skills at all levels

• Possibility to join flexible work and the 4x9 short week

• Modern and integrated corporate welfare system ( link)

• Health coverage and supplementary pension starting from hiring

• Advantages on the Group's banking products and services

Who we are

We are leaders in Italy and one of the main banking groups in Europe. Join us and be part of our success story! With over 20 million customers in Italy and abroad, we are a true engine of sustainable growth with a strong commitment to the environment and a tangible impact on society.

People are at the center; we take care of them by committing to creating an inclusive culture within the Group where everyone feels like a protagonist and valued.

The Chief Security Officer Governance Area oversees the physical security, cybersecurity, and operational continuity of the Group in an integrated way, leveraging specialized skills and advanced technological solutions, with the goal of ensuring high security standards at an international level.

The Area includes the Security Staff, Group Security Planning & Models Monitoring, Corporate and Physical Security, and Cybersecurity, Antifraud & Business Continuity Management structures, ensuring a coordinated and transversal approach to the protection of the Group.

Join our international reality. The future is not waited for, it is chosen!

#sharingfuture

We guarantee an inclusive and equal opportunity environment. We will consider all applications regardless of race, religion, sexual orientation, gender identity, marital status, age, disability, or any other protected category in compliance with Legislative Decrees 198/2006, 215/03, and 216/03.

For the evaluation of applications, the data will be used by Intesa Sanpaolo S.p.A. as Data Controller. We invite you to read the dedicated Privacy Policy.