Cyber Incident Manager

Imagine a career where you're not just responding to security incidents—you’re revolutionising how it’s done. At Maersk, one of the world’s largest and most respected logistics and shipping companies, our Cyber team is pioneering a whole new approach to incident response. This isn’t your typical SOC/CERT role: our combined fire team approach team is built on cutting‑edge research and designed to drive change, resilience, and agility in ways the industry has never seen before.

Here, you’ll be part of a dynamic team that works together to defend, adapt, and innovate with freedom and purpose. You won’t just work on Incident Management; you’ll help improve how it’s done. Dive into purple teaming, create and refine world‑class detections, shape change projects, and push the boundaries of what’s possible—all during the workday with no overnight shifts. Plus, we champion continuous learning and growth through Capture the Flag (CTF) exercises and direct opportunities to bring your ideas to life.

Are you ready to be part of something transformational at Maersk and join a team that’s setting a new standard in cybersecurity?

• Join a World‑Class Cyber Team:
  Be part of an elite cyber operation at one of the globe’s most renowned logistics companies, where your contributions truly make a difference.
• Multidimension role to Keep You Engaged:
  Unlike any traditional SOC role, as a CERT analyst in Maersk, you’ll engage in a variety of activities, switching between defensive and offensive strategies, conducting threat hunts, and participating in innovative projects and research. This multifaceted approach ensures you won’t experience burnout like in a typical SOC role.
• Continuous Learning & Dynamic Environment:
  Enjoy ongoing training and development in a fast‑paced, stimulating atmosphere. Participate in exciting CTF competitions alongside a team of experts, pushing the boundaries of your knowledge and skills.
• Using cutting edge technologies:
  Tackle complex cyber incidents that require innovative solutions and utilizing the latest technologies available in the market. Your expertise will be crucial in addressing and mitigating sophisticated threats, allowing you to hone your skills in a real‑world environment.
• Innovate and Impact:
  Engage in innovative projects that allow you to bring your ideas to life, help shape the future of cybersecurity while developing new capabilities that enhance our operations.

• Lead incident management activities in response to all high priority cyber‑security incidents, with the ability to remain calm and focused during crisis situations.
• Ability to manage conflicting priorities and multiple tasks in a high‑pressure environment.
• Strong leadership skills with the ability to motivate and manage response teams during high‑pressure situations.
• Co‑ordinate resources across the organisation to develop and execute response plans that ensure cyber‑security incidents are managed effectively and efficiently and limit or mitigate business impact.
• Communicate effectively with internal stakeholders, including senior leadership with the ability to provide rapid and concise summaries of complex situations.
• Deliver and co‑ordinate Post Incident activities which include producing detailed incident reports and conducting Post Incident Reviews.
• Contribute to and participate in cyber‑security incident readiness activities which can include simulations and tabletop exercises.
• Identify gaps and continuously improve detection and response capabilities by creating and fine‑tuning use cases, developing automation and documenting processes and playbooks.
• Identifying lessons learned to improve future incident response and detection strategies.
• Contribute to development of detection mechanisms for sophisticated adversarial techniques based on the MITRE ATT&CK framework.

• Support the planning and response of purple teaming activities.
• Develop scenarios and artifacts that mimic real‑world adversary groups for simulated testing.

• Mentor and coach a multidisciplinary team of analysts and investigators, from a technical…