The LEGO group is a leading manufacturing organization committed to maintaining the highest standards of cybersecurity. We are seeking a talented and experienced Cyber Security Incident Responder to join our dynamic cybersecurity team. As a key member of our security operations, you will be responsible for conducting incident response activities and supporting digital forensics/E-discovery investigations to ensure the security of our organization.
You can be based either in Billund Campus or Copenhagen Digital Hub.
Please note there is no relocation budget for this role.
Job Overview:
The Cyber Security Incident Response specialist at the LEGO group will play a critical role in investigating cybersecurity incidents, conducting digital forensics analysis / e-discovery and contributing to incident response efforts. This position requires a deep understanding of incident response methodologies and procedures and the ability to work effectively in a fast-paced environment. Experience with Digital Forensics tools and techniques and E-discovery will be an asset.
Key Responsibilities: Digital Forensics Investigations / E-discovery:
- Support E-discovery activities (MS purview)
- Develop the procedures for DFIR
- Perform thorough digital forensics investigations to identify, analyze, and document evidence related to cybersecurity incidents.
- Preserve and analyze electronic evidence, ensuring chain of custody and maintaining forensic integrity.
Incident Response Support:
- Work closely with incident response teams to provide expertise during cybersecurity incidents.
- Contribute to the analysis of incidents, determining the root cause and recommending remediation actions.
Evidence Documentation and Reporting:
- Document findings from digital forensic investigations in a clear and detailed manner.
- Prepare comprehensive reports for management, legal teams, and other relevant stakeholders.
Collaboration and Communication:
- Collaborate with cross-functional teams, including incident response, threat intelligence, and IT, to share findings and contribute to overall security efforts.
- Communicate technical information to non-technical stakeholders in a clear and understandable manner.
Continuous Improvement:
- Contribute to the development and enhancement of digital forensics and incident response procedures and playbooks.
- Provide recommendations for improving the organization's overall cybersecurity posture based on forensic analysis insights.
Qualifications:
- Bachelor's degree in computer science, Digital Forensics, or a related field. Relevant certifications such as EnCE, CFCE, or GIAC is highly desirable.
- Minimum of 5 years of experience in incident response.
- Proficient in using digital forensics tools and techniques, as well as incident response methodologies.
- Strong knowledge of computer networks, operating systems, and cybersecurity principles.
- Excellent analytical and problem-solving skills.
- Effective communication and interpersonal skills.
Technology experience:
- MS Security tools; Defender for Endpoints, Sentinel, Purview
- KQL use
- O365, Azure AD, Confluence
- Cloud security tools from vendors like AWS (Cloudtrail, GuardDuty), MS Azure/Entra
Nice to have:
- Building detection rules and use cases in tools like MS Defender and MS Sentinel
- SANS 504
- Familiarity with Elastic, Elastic SIEM
#LI-BL1
Applications are reviewed on an ongoing basis. however, please note we do amend or withdraw our jobs and reserve the right to do so at any time, including prior to any advertised closing date. So, if you're interested in this role we encourage you to apply as soon as possible.
What's in it for you?
Here is what you can expect:
Family Care Leave - We offer enhanced paid leave options for those important times.
Insurances - All colleagues are covered by our life and disability insurance which provides protection and peace of mind.
Wellbeing - We want our people to feel well and thrive. We offer resources and benefits to nurture physical and mental wellbeing along with opportunities to build community and inspire creativity.
Colleague Discount - We know you'll love to build, so from day 1 you will qualify for our generous colleague discount.
Bonus - We do our best work to succeed together. When goals are reached and if eligible, you'll be rewarded through our bonus scheme.
Workplace - When you join the team you'll be assigned a primary workplace location i.e. one of our Offices, stores or factories. Our hybrid work policy means an average of 3 days per week in the office. The hiring team will discuss the policy and role eligibility with you during the recruitment process.
Children are our role models. Their curiosity, creativity and imagination inspire everything we do. We strive to create a diverse, dynamic and inclusive culture of play at the LEGO Group, where everyone feels safe, valued and they belong.
The LEGO Group is highly committed to equal employment opportunity and equal pay and seeks to encourage applicants from all backgrounds (eg. sex, gender identity or expression, race/ethnicity, national origin, sexual orientation, disability, age and religion) to apply for roles in our team.
Research shows that women and people from different minority backgrounds often only apply for a job if they meet 100% of the listed qualifications. If you dream of being a part of our team and you meet many, but not all of our listed qualifications for this role, please apply.
The LEGO Group is fully committed to Children's Rights and Child Wellbeing across the globe. Candidates offered positions with high engagement with children are required to take part in Child Safeguarding Background Screening, as a condition of the offer.
Thank you for sharing our global commitment to Children's Rights.
Just imagine building your dream career.
Then make it real.
Join the LEGO team today.
- Location
- Billund, Denmark
- Copenhagen, Denmark
- Job ID:
0000014237 - Category
IT, Telecom & Internet