Experteer Overview
Cualquier información adicional que necesite para este trabajo se encuentra en el texto a continuación. Asegúrese de leerla detenidamente y luego envíe su solicitud.
In this role you will lead the Global Cyber Security Incident Response Team to manage and resolve significant security incidents while driving improvements to incident management capabilities. You will partner with SOC, Threat Hunting, CTI, and Insider Threat teams and coordinate with HR, Legal, and Compliance to ensure effective incident handling. You will refine playbooks, leverage AI-assisted triage and automation, and oversee integral incident response activities. This is a chance to shape WTW’s incident response program within a large, security‑minded culture and global operation.
Compensaciones / Beneficios
• Spearhead escalation handling for major security incidents, coordinating across technical and business teams to minimize impact
• Design, update, and maintain incident response processes, playbooks, and workflows aligned with best practices
• Serve as the central liaison for incident response, communicating with senior leadership, Legal, HR, and Compliance
• Incorporate AI and automation into containment, response, and remediation within SOAR workflows
• Lead in-depth investigations of escalated incidents, driving containment,



eradication, and recovery while identifying root causes
• Coordinate with SOC, Threat Hunting, CTI, Insider Threat, and Vulnerability Management for seamless information sharing
• Lead post-incident reviews to derive lessons learned and strengthen the program
• Assess incident impact and severity, escalating as needed
• Contribute to KPIs and metrics to measure incident response effectiveness
• Bridge technical teams and business stakeholders with clear incident status updates
Responsabilidades
• 5+ years in SOC or incident response
• Understanding of cybersecurity frameworks, principles, and tools xqbhyrx
• Awareness of AI/ML in security operations and risk of AI threats
• Hands-on cloud incident response experience (Azure, AWS, and/or GCP)
• Proven ability to lead high-stakes security incidents and cross-functional coordination
• Strong knowledge of MITRE ATTu0026CK, cyber kill chain, and IR methodologies
• Excellent verbal and written communication, able to explain technical concepts to executives
• Proactive, decisive, and able to perform under pressure
• Analytical and problem-solving skills
• Collaborative mindset with mentoring willingness
Requisitos principales
•

📌 Cyber Security Incident Response - Assistant Manager (Madrid)
🏢 Willis Towers Watson
📍 Madrid