Senior Incident Response Handler

Job title:

Senior Incident Response Handler

Company

Telenor

Job description

Telenor Cyberdefence AS is a wholly owned, newly started Nordic cyber security company in the Telenor Group. Telenor Cyberdefence AS’ ambition is to become a leading MSSP (Managed Security Services Provider) in the Nordic market, among other things by using Telenor’s unique access to threat intelligence to support our services. In addition to delivering modern managed security services, Telenor Cyberdefence AS will also offer specialist expertise through consultancy services and testing of infrastructure / applications with our Offensive Security team.Join our growing IR Team at Telenor Cyberdefence as a Senior Incident Response HandlerAt Telenor Cyberdefence, our strength lays not just in our technology, but in the people who lead the response when cyber threats strike. We are now looking to strengthen our Incident Response capability with a Senior Incident Response Handler – someone who thrives in high-pressure situations, is technically sharp, and cares deeply about quality, collaboration, and customer trust.You will be joining a dedicated IR team embedded in one of Norway’s most specialized security environments for cloud-based security services. While your focus will be on Incident Response, you’ll work closely with our 24/7 SOC, Detection and Threat Intelligence teams to deliver high-quality response services to a wide range of customers across critical sectors.This role is ideal for someone who wants to take a lead in investigations, coordinate response efforts, contribute to detection quality, and mentor others – and who’s not afraid to roll up their sleeves during complex cases or high-stake incidents.Key ResponsibilitiesLead or support incident response investigations involving advanced threats, including malware, ransomware, insider activity, and cloud compromiseAnalyze complex cases escalated from Tier 1/2 analysts, perform root cause analysis, and deliver actionable recommendationsParticipate in 24/7 on-call rotation and provide leadership during high-priority cases requiring urgent containment and coordinationInterface directly with customers during active incidents and proactive engagements, serving as a trusted IR leadContribute to development of IR playbooks, response procedures, threat actor tracking, and forensic readinessMentor and support junior analysts, conduct quality assurance on escalated cases, and foster a strong security cultureBridge IR and SOC by collaborating on detection tuning, telemetry validation, and post-incident feedbackTake ownership of specific projects or internal initiatives related to IR capability developmentWe believe you bring the following:Solid experience from Security Operations, Incident Response, or similar field roles (typically 3–5+ years)Deep understanding of attacker techniques, IR methodology, and modern threat landscapesStrong investigation skills across endpoints, networks, logs, and identity systemsExperience with or interest in Microsoft Defender XDR, Microsoft Sentinel, and forensic/SOAR toolingProven ability to work in customer-facing scenarios with clarity, professionalism, and composureGood documentation habits and structured approach to coordination and reportingExperience guiding others, building team competence, or driving internal improvement workSustaining relevant certifications (e.g. GCIH, GCFA, SC-200, AZ-500, BTL2) – but equivalent experience is just as valuableWe offer:A visible, strategic role in a high-growth security company focused on protecting critical Nordic infrastructure and enterprisesThe opportunity to shape and strengthen our national-level IR capability together with highly skilled colleaguesA professional environment where learning, collaboration, and ownership are valuedFlexibility to evolve the role based on your strengths – whether that’s technical depth, leadership, or customer strategyOpportunities for growth, certifications, and participation in community and industry initiativesCompetitive compensation and a modern office at Telenor Fornebu or GrimstadAt Telenor Cyberdefence, we place strong emphasis on purpose, psychological safety, and continuous learning.If you’re passionate about helping customers when it matters most — and want to grow your impact in a trusted team — we’d love to hear from you. We evaluate applications continuously.

Expected salary

Location

Fornebu, Viken

Job date

Tue, 24 Jun 2025 22:36:39 GMT

To help us track our recruitment effort, please indicate in your email/cover letter where (jobsineu.net) you saw this job posting.