Talent Apply
Log in
All jobs
IS

CSIRT Incident Response Lead

Intesa San Paolo

About this role

About the Role Join Intesa Sanpaolo's CSIRT in a dynamic, international growth context. You will be the technical reference in the bank's CSIRT, coordinating and managing high-complexity incidents, providing technical guidance and specialist support, and contributing to post-incident analysis and incident readiness across business continuity and regulatory touchpoints. What You'll Do

  • Coordinate and manage high-complexity and critical incidents, ensuring effective containment, eradication, and recovery in collaboration with technical functions
  • Evaluate events from across the bank's Event Management to define severity and priority, directing actions per policies
  • Lead advanced technical analyses (log correlation, EDR/SIEM analysis, timeline reconstruction, evidence handling) and validate investigative activities
  • Support containment and response activities, coordinating required support and multi-stakeholder remediation
  • Manage incidents with potential Business Continuity impacts, collaborating to assess operational impacts, enable measures, and restore services
  • curate tracking and reporting to stakeholders, including top management, ensuring information quality and consistency
  • Interface with external counterparties (e.g., national CSIRT, authorities, vendors) and validate technical elements
  • Coordinate and facilitate post-incident analysis, identifying root causes and lessons learned, and proposing corrective and preventive actions
  • Plan and run incident readiness simulations and tabletop exercises, ensuring formalization of outcomes and improvement actions What We're Looking For
  • 5-10 years of experience in cybersecurity, specifically in Incident Response and Cyber Security
  • STEM degree (Engineering, Computer Science, Cyber Security or related)
  • Excellent written and spoken English
  • Proven track record in Incident Response / CSIRT / SOC within complex environments; financial sector experience is highly preferred Nice to Have
  • Experience in the financial sector is a plus Compensation & Benefits
  • Salary not disclosed.

Your next opportunity starts here

Prepare, apply, track, interview and get hired — all from one platform, with AI in your corner.

Download app

Or sponsor Premium for someone who's job hunting →