Digital Forensic and Incident Response

AVEVA is a global leader in industrial software. Our cutting-edge solutions are used by thousands of enterprises to deliver the essentials of life - such as energy, infrastructure, chemicals and minerals - safely, efficiently and more sustainably.

We’re the first software business in the world to have our sustainability targets validated by the SBTi, and we’ve been recognized for the transparency and ambition of our commitment to diversity, equity, and inclusion. We’ve also recently been named as one of the world’s most innovative companies.

If you’re a curious and collaborative person who wants to make a big impact through technology, then we want to hear from you Find out more at

AVEVA Careers


For more information about our privacy policy and how to manage cookies, visit our

Privacy Policy


The Job

Responsibilities:

- Manage and supervise Cyber Security Response Analyst team to proactively identifying, Investigating, and hunting potential attacks and security risks on AVEVA networks and systems using various platform dashboards and threat feeds.
- Manage and supervise Cyber Security Response Analyst team on analysis of security events as detected by various security controls, monitoring, and recording security events in daily, weekly, monthly, and quarterly reports.
- Manage and supervise Cyber Security Response Analyst team on analysis of escalated security events, notifications, and alerts from managed Security Operation Centre (SOC).
- Supervise and collaborate with Cyber Security DFIR team on creating and maintaining information security operations process, procedure, and checklist documentation, such as incident response plan and playbook.
- Supervise and collaborate with Cyber Security DFIR team on incident response using AVEVA defined Security Incident Response framework such as NIST.
- Reports to Security Incident Manager on concerning security events, incident trends, residual risk, vulnerabilities, and other security exposures, including misuse of information assets and noncompliance.
- Works with the AVEVA Infrastructure Operations team and any required partners/business functions such as R&D to resolve security events, incidents, and service requests.
- Ensures Cyber Security DFIR team comply with security processes and procedures and supports service-level agreements (SLAs) to ensure that security controls are managed and maintained.
- Contributes through security advisories, blogs, and other communication channels on current and emerging security threats to AVEVA assets and people via the security awareness program.
- Be available to provide reactive support to critical security incidents outside standard business hours as part of a rota.

Skills and Qualifications:

- Minimum of five years information and cyber security experience as Security Analyst and Incident Response, Security Threat Hunting, or Security Operations Centre analyst role.
- Bachelor's degree in information systems or equivalent work experience in relevant information and cyber security domain.
- Security certification from a recognized organization such as ISC2, CompTIA, ECouncil, SANS Institute is as advantage.
- Technology standard certification such as from Cisco, VMware, Microsoft is an advantage.
- Familiarity with cloud computing environments such as Microsoft Azure
- Familiarity with Security Operations Centers (SOC)
- Experience responding to incidents, developing (and seeing through to completion) remediation plans,
- creating and formalizing incident response program processes and procedures and working cross
- functionally with teams outside of security to accomplish enterprise security goals.
- Excellent interpersonal and group dynamic skills
- Exceptional stakeholder management skills
- Awareness of the Mitre ATT&CK framework and how it can be used to learn an adversary’s tactics and techniques and focus incident response.
- Experience using Security Information and Event Management (SIEM) and analyzing log data sources.
- Knowledge and understanding of information risk concepts and principles, as a means of relating business needs to security controls.
- Knowledge and experience in developing and documenting security processes and plans.

AVEVA is an Equal Opportunity Employer. We are committed to being an exemplary employer with an inclusive culture, developing a workplace environment where all our employees are treated with dignity and respect. We value diversity and the expertise that people from different backgrounds bring to our business.

Come and join AVEVA to create the transformative technology that enables our customers to engineer a better world.