Cybersecurity Incident Response Officer

Cybersecurity Incident Response Officer

Based in Warsaw, hybrid working (50/50) 

At least 3 years’ experience 

English mandatory

Start day: January 1st 2027

About the Team

Arval IT is an international IT organization, with a workforce of around 1 000 internal and external professionals located in several countries (France, UK, Netherlands and other). As part of our sourcing strategy, we are expanding our nearshoring capabilities by establishing a new Arval Technical Center (ATC) in Poland, within an existing business operations shared service center (Arval Competence Center Warsaw, ACCW). This Arval Technical Center plays a strategic role in the development of digital expertise, and internalization of key competencies currently handled by external partners.

Arval Competence Center Warsaw is the latest initiative of the BNP Paribas group, which aims to develop competences and business services. Currently, ACCW employs over 90 people who, every day, in various languages, help Arval Group entities to efficiently serve Clients and Partners. In ACCW, solutions are being created that aim to streamline the customer and supplier verification processes. The center specializes, among others, in credit analyses and KYC analyses, and also performs tasks in the field of HR data administration and internal control.

Arval Cybersecurity & IT Risks CoE (Center of Expertise) aims at:

• Providing guidance on IT security and ensuring its implementation (through the information system security policy),
• Assessing risks, threats and their consequences and draw up a prevention plan,
• Making all ARVAL employees aware of cyber security,
• Providing recommendations to project managers on the security of their applications and deciding to audit some of them if necessary.
• Managing Cybersecurity incident through a dedicated CSIRT team, integrated in BNP Paribas CSIRT global organization.

Cybersecurity & IT Risks CoE team is composed of around 50 professionals, located today mainly in Rueil Malmaison France.

Duties - Responsibilities

We are looking for a skilled Security Engineer to take part in the activities of the Computer Security Incident Response Team (CSIRT)

Activities

THE COLLABORATOR WILL BE INVOLVED IN SOME OR ALL OF THE FOLLOWING ACTIVITIES 

• Incident handling and responses
• Investigations, including performing digital forensics
• Data leak protection
• Phishing identification
• Threat hunting campaigns
• Cyber threat intelligence production
• Vulnerability management

Expertise and skills 

Business Skills

• IT Knowledge
• Digital Forensics
• Risk Monitoring
• Security
• Cybersecurity

TRANSVERSAL SKILLS

• Analytical Thinking
• Adaptability
• Ability to collaborate / Teamwork
• Creativity & Innovation / Problem Solving
• Ability to Deliver / Results Driven
• Good interpersonal and communication skills

COMMON BASE TOOLSmethodologies

• EDR (Tanium), Antivirus (Trellix), SIEM (Elastic Search)
• Netcraft, Virustotal, Ghidra, Symantec DLP
• Service Now

CORE COMPETENCES AND EDUCATION

• Preferably a MSc in Information Security
• Fluent in English (written & verbal)
• Proven record as an incident handler or CTI analyst
• Proven experience in the field of digital forensics
• Detailed technical knowledge of tactics, techniques, and procedures leveraged by attackers
• Autonomy and capacity to deliver within a given timeframe
• Ability to function effectively in a matrix structure
• Interest in all aspects of security research and development
• Holding one or several of the following certifications would be a plus: GREM, GCFA, Blue Team Level 1 (BTL1), Blue Team Level 2 (BTL2), Certified Red Team Expert (CRTE) or Certified Red Team Professional (CRTP)
• Fluent in French would be a plus

Poste-type and Location

Arval Department: ACCW IT 

BNP Paribas Job type: Cybersecurity Incident Response Officer

Location: based in the local country/regions (Poland)

We inform you that Arval Service Lease Polska Sp. z o.o. and Arval Competence Centre - Arval Service Lease Polska Sp. z o.o. Branch in Warsaw have an internal procedure for reporting breaches of law and taking follow-up actions (Whistleblowing Procedure), which is available on the Arval Service Lease Polska Sp. z o.o. website: https://www.arval.pl/ogolne/whistleblowing