GBMDN02 - Maidenhead - The Point, United Kingdom
Maersk
Maersk is an integrated logistics company that offers supply chain solutions for managing shipments and cargo. Imagine a career where you're not just responding to security incidents—you’re revolutionising how it’s done. At Maersk, one of the world’s largest and most respected logistics and shipping companies, our Cyber team is pioneering a whole new approach to incident response. This isn’t your typical DFIR role; our combined fire team approach is built on cutting-edge research and designed to drive change, resilience, and agility in ways the industry has never seen before.
Here, you’ll be part of a dynamic team that works together to defend, adapt, and innovate with freedom and purpose. You won’t just work on Digital Forensics; you’ll help improve how it’s done. Dive into purple teaming, create and refine world-class detections, shape change projects, and push the boundaries of what’s possible—all during the workday with no overnight shifts. Plus, we champion continuous learning and growth through Capture the Flag (CTF) exercises and direct opportunities to bring your ideas to life.
Are you ready to be part of something transformational at Maersk and join a team that’s setting a new standard in cybersecurity?
Key Responsibilities:
* Provide detailed forensic RCA to key stakeholders, supporting Cyber Security Incident team during deep dive investigations and PIR.
* Further develop forensic capabilities in Traditional and modern cloud, OT and AI driven space.
* Conduct threat hunting by analysing data to identify existing threats on the network and support proactive content analysis.
* Support the continuous improvement of Maersk’s capability to detect and respond to incidents by collaborating with other teams across Cyber Operations.
* Work on key Cyber Security uplift projects, representing the Respond delivering results and embedding new capabilities into BAU.
* Provide an out-of-hours incident on-call technical/forensic response on a rota basis.
* Fulfil a key role within the Incident Management team to support Senior Technical Leads in investigation, resolution and recovery objectives.
* Support the 24/7 team when required in monitoring security alert feeds to detect, triage and investigate security events and classify them as incidents where appropriate.
Required Experience & Skills:
* Technical Forensic capability across Endpoint, Cloud and OT infrastructure.
* Excellent written and verbal communication skills and able to be understood by both technical and non-technical stakeholders.
* Stakeholder management and interpersonal skills (at both a technical and non-technical level).
* Outstanding critical reasoning and problem-solving skills.
* Excellent Event Logs analysis, i.e. Application, Security, System, PowerShell.
* Good knowledge of forensics tooling, such as Volatility, Kape, Autopsy, Wireshark.
* The role holder will have proven experience working in a Security Operations Centre (SOC) and/or Computer Emergency Response Team (CERT) within a team of other analysts and engineers.
* Experience in Threat Hunting and Incident Management (preferred but not essential).
* Experience in conducting Forensics both in small but also Enterprise scale, including but not limited to Cloud, OT and Traditional Infrastructure.
Soft Skills:
* Operations Management & Issue Resolution.
* Report Writing: Ability to write reports that convey highly technical information whilst remaining accessible to a non-technical audience.
* Critical Thinking, Adaptability & Problem-Solving.
* Time Management & Organization.
* Teamwork & Positive Attitude.
Qualifications:
* Minimum of 5+ years in a SOC/forensics role.
* Relevant advanced certifications (e.g., GCIA, GSEC, CEH, GCDA, GCIH, GCFA) are highly desirable but not essential.
Maersk is committed to a diverse and inclusive workplace, and we embrace different styles of thinking. We are happy to support your need for any adjustments during the application and hiring process.
#J-18808-Ljbffr