Publication date : Oct 22, 2026, 12:00AM
How would you like to work in IT, toying with cutting edge technologies and enjoying your life? At Orange Services, it’s possible!
As one of the largest IT Hub within Orange Group, we are working internationally for both Orange corporate functions and country operations. Through a unique combination of know-how and expertise, our teams provide a broad range of IT & Business Solutions.
Come closer to #LifeAtOrange!
What we’re looking for
We seek a skilled Incident Response Coordinator with strong operational security experience, including malware analysis, threat intelligence, and deep investigation of security incidents. The ideal candidate will have expertise in network and systems security, cloud security, and incident management, along with relevant certifications (e.g., SANS GCIH, CISSP, CEH). You should be analytical, detail-oriented, and capable of managing complex cybersecurity incidents, working collaboratively in a fast-paced environment, and sharing your knowledge with team members.
What you’ll be doing
Act as the first responder for cyber-security incidents identified through different channels.
Investigate cases such as, but not limited to: malware, cyberattack, APT, security breaches.
Understand and identify indicators of attack and indicators of compromise.
Investigate root cause of complex security incidents.
Analyze incident data from threat analytics tools.
Coordinate a response to the security incident with other internal teams and vendors.
Develop, document and implement runbooks, capabilities and techniques for Incident Response.
Develop reactive measures using automation tools (SOAR).
Perform security triage and analysis / threat hunting on endpoint, server and network infrastructure.
Perform activities necessary for immediate containment and short-term resolution of incidents.
Collect, preserve and process volatile information and evidences needed to conduct highly-confidential forensic investigations.
Ensures forensic investigation and incident response procedures comply with standard operating procedures, processes, policies, guidelines and forensics best practices.
Examine and analyze security events or incidents and investigate significant issues related to technology infrastructure.
Coordinate or provide recommendations for containment and remediation steps until security incident closure.
Prepare detailed written reports that document the incident timeline and circumstances, present forensic evidence to varied audiences and offer expert opinions. Communicate investigation results and findings for administrative or legal purposes to internal stakeholders, senior management, auditors etc.
Lead efforts to refine incident response and forensics methodologies, optimize related processes and procedures.
Coach and advise teams on effective security practices, procedures and technical countermeasures to reduce risk.
What you need to know/have
Experience in Security Incident Response with operational security experience (Indicator of Attack / Indicator of Compromise deep investigation, Malware Analysis, Threat Analytics, Threat Intelligence etc.)
Experience in Network Security Administration and/or Systems Administration (Windows Server and Active Directory)
Experience with various EDR solutions
You have knowledge of various query languages for SIEM
Cloud experience with any of the major cloud providers, including cloud security
Ability to manage complex incident response situations with a focus on deep technical troubleshooting
You have knowledge of Linux and Windows server systems and hardening methodology
You have networking knowledge (TCP/IP, routing protocols etc.), troubleshooting skills
You have knowledge of virtualization concepts and solutions
You have basic knowledge about scripting (any from bash, Python, Powershell)
You graduated from a faculty such as Electronics, Telecommunications and Information Technology, Automatic Control and Computer Science,…