Security Incident Manager

About the role

You will act as the central coordinator for security incidents across Orange Cyber Defense managed client environments. Leveraging deep knowledge of threat actors and incident lifecycles, you will guide teams from detection through containment, eradication and recovery while keeping stakeholders informed.

Key responsibilities

• Lead and coordinate the full lifecycle of security incidents, from initial triage to post‑incident review.
• Serve as the primary point of contact for clients during active incidents, delivering clear and timely communications.
• Drive cross‑functional collaboration among SOC analysts, threat‑intelligence, forensics and client technical teams.
• Own post‑incident reporting and translate lessons learned into actionable improvements.
• Maintain and continuously improve incident‑response playbooks, escalation paths and SLA frameworks.
• Represent Orange Cyber Defense in high‑stakes client calls and executive‑level briefings.
• Contribute to the development of incident‑management tooling, including ITSM workflows and SIEM integrations.

Required profile

• Proven experience as a security incident manager or senior incident responder.
• Calm, decisive and structured approach in chaotic situations.
• Strong communication skills for both technical deep‑dives and senior stakeholder briefings.
• Passion for continuous learning and mentoring junior responders.

Required skills

• Incident response coordination
• SOC analysis and collaboration
• Threat intelligence integration
• Digital forensics basics
• SIEM integration
• ITSM workflow design

What we offer

• Global opportunities to work with multi‑national teams.
• Exposure to a wide range of industries and complex security challenges.
• Professional development and mentorship programs.