Cybersecurity Incident Response Specialist - Security Incident Manager (Digital Forensics)

Company Description

Ubisoft is a global leader in video games, with teams around the world creating original and memorable gaming experiences, from Assassin’s Creed to Rainbow Six, Just Dance, and many more. We believe that diversity of perspectives drives both player and team progress. If you are passionate about innovation and want to push the boundaries of entertainment, join our adventure and help us create the unknown!

As a Cybersecurity Incident Response Specialist - Security Incident Manager at Ubisoft Montreal, you will lead the response to complex cybersecurity incidents affecting our global infrastructure, game production environments, and player-facing services. You will join the Security and Risk Management team and contribute to enhancing our detection, investigation, and intervention capabilities.

What You Will Do

• Lead the response to critical cybersecurity incidents involving multiple teams, including security operations, IT, legal teams, and production teams
• Coordinate incident management activities and serve as the primary point of contact during active investigations
• Analyze security risks related to game production environments, online services, development pipelines, and player data
• Improve intervention processes, investigation procedures, and internal security tools
• Conduct proactive threat hunting activities within the company's environments
• Perform digital forensic investigations involving memory, disks, and networks using tools like Velociraptor, Autopsy, and other comparable solutions
• Collaborate with technical and non-technical stakeholders to communicate investigation results and intervention plans
• Mentor team members and foster knowledge sharing within the Security Operations Center
• Facilitate simulation exercises and contribute to continuous improvement initiatives
• Author post-incident reports for technical teams, management, legal teams, and Privacy Information Managers

Qualifications What You Bring to the Team

• Experience in managing and coordinating complex cybersecurity incidents, from detection to resolution
• Demonstrated ability to work autonomously, identify areas for improvement, and implement solutions
• Strong knowledge of security event and information management platforms as well as endpoint detection and response tools like Splunk, CrowdStrike, Defender, or equivalent technologies
• Experience with security automation and orchestration platforms
• Practical experience in digital forensic investigations using tools like Velociraptor, Autopsy, Axiom, or similar solutions
• Knowledge of threat hunting methods and investigation techniques in complex environments
• Excellent communication skills and ability to adapt technical information to different audiences
• Experience in gaming environments, anti-cheat systems, or large-scale cloud infrastructures is a plus

Additional Information

• Your resume highlighting your skills
• Relevant projects, publications, or technical presentations related to cybersecurity or incident management