ph3Location /h3 pItaly /p h3Employment Type /h3 pFull time /p h3Location Type /h3 pHybrid /p h3Department /h3 pAll Cost Center RD ENG /p pbAre you ready to power the World's connections?
/b /p pIf you don't think you meet all of the criteria below but are still interested in the job, please apply.
Nobody checks every box - we're looking for candidates that are particularly strong in a few areas, and have some interest and capabilities in others.
/p h3About the Role: /h3 pThis position will build a working leader reporting to the security manager, who is responsible for creating a collaborative environment between Kong Inc.
Security and all impacted business/engineering teams by working together in the effective incident detection, response, recovery, identification, and protection.
Stakeholder management and clean thinking under pressure are critical requirements for the role, together with a strong passion for Cyber Security and its fantastic ability to make a real difference in protecting customers, partners and employees.
/p pThe company's leadership team, and a cross-functional team of skilled engineers from various perspectives, all working with a singular focus of maintaining our customer's trust.
You'll be exposed to the reality of how Kong functions on a technical and process level and will build a comprehensive base of knowledge around how it all works together.
In doing so, you'll be playing a role in keeping Kong secure and compliant, bringing security to our company's forefront.
/p h3What you'll be doing: /h3 ul lipExecute,



develop and document incident handling guides and processes for Kong /p /li lipPrioritizes events using existing tools to correlate data to reduce false positives and detect threats /p /li lipAnalyze and tune security alerts and interpret events, as well as create new signals based on signatures and behavioral activities /p /li lipRespond to security incidents and perform forensics on IT systems as necessary.
/p /li lipGuide/lead mitigation strategies for identified vulnerabilities and threats /p /li lipDesign, automate and maintain a portfolio of security alerts, automated actions, and escalation workflows supporting a high-performing 24/7 incident response capability.
/p /li lipConduct threat hunting activities, anticipate future threats, and maintain forward-thinking strategies for tools/technology/processes that combat sophisticated threat actors.
/p /li lipAssist with implementation of counter-measures or mitigating controls /p /li lipDevelop and maintain Incident Response capabilities in public cloud environments /p /li lipPrepare incident reports of analysis methodology and results.
/p /li lipRecognize potential, successful,



and unsuccessful intrusion attempts and compromises thorough reviews and analyses of relevant event detail and summary information /p /li lipPartner with key stakeholders and communicate effectively to improve preparation, identification, analysis, containment, and post-mortem activities feedback loop.
/p /li lipDevelop monthly reporting dashboards and metrics on incidents and response capabilities /p /li lipPrepare executive summaries and conduct briefings on significant investigations.
/p /li /ul h3What you'll bring: /h3 ul lipExperience in crisis management, namely in preventing incidents from becoming a crisis /p /li lipInsight of using incidents as opportunities by leveraging Incidents to drive innovation, situation awareness, and fixes /p /li lipPassion for automation, delegation, and scalability via playbooks and highly effective processes /p /li lipDrive for automating processes and workflows to detect, contain and eliminate active malicious agents /p /li lipExpertise in building and operating security information/event management systems (SIEM), centralized logging, and enrichment solutions (Endpoint protection/detection, Panther, Crowdstrike, AWS Security Hub, codebase infrastructure, build infrastructure).
/p /li lipPractical experience working with cloud technologies; ability to build and deploy a solution using Terraform.
/p /li lipExperience with building and deploying solutions (Ansible, Terraform) /p /li lipCompetency in Linux, windows; /p /li lipAbility to automate workflows via Python or javascript scripting languages.
/p /li /ul /p #J-*****-Ljbffr

📌 Senior Incident Response Engineer (Milano)
🏢 Cacheflow
📍 Milano