Mid-Level

Security Incident Handler

DXC Technology

SOFIA, BGR, VARNA · Hybrid

Job Description:

About DXC Bulgaria

We are DXC – a Fortune 500 global IT services leader.

In Bulgaria, we are among the largest IT employers, delivering the full spectrum of the company’s diverse technical portfolio. Our teams work across cutting-edge technologies, contributing to projects that span industries and geographies.

We foster continuous learning and professional growth, offering access to targeted training and certifications aligned with individual interests and career aspirations.

Our culture of collaboration, innovation, and shared values empowers professionals to grow and succeed.

About the role

The Security Incident Handler is an integral part of the Security Incident Response Process within the Security Operations Center team. The primary function of the role will be to provide a technical escalation point during Security Incidents, establishing the extent of the threat, the business impacts and advising the most suitable course of action to contain and remedy the incident. Outside of the Incident Process the Security Incident Handler is expected to maintain a good knowledge of the Current Threat Landscape, help enhance current techniques and identify new methods of detecting threats on our customers' networks. They must also demonstrate the ability to communicate effectively with the other key stakeholders in the incident process.

Daily challenges

Perform detail analysis of events during the incident process, combining sound analytical skills with advanced knowledge of IT Security and Network Threats.
Participate in the creation, modification and update of security incident management processes.
Perform daily follow-up on all tickets that were not resolved by Security Incident Analysts and daily quality checks on all tickets and incidents worked on by Security Incident Analysts.
Provide swift and accurate reactions during an ongoing security crisis situations identifying different type IoCs establishing mitigation/remediation plans.
Provide out-of-office hours, on-call support and guidance to the junior team members.
Full understanding of MITRE framework and the Cyber Kill Chain methodology.
Escalation to Security support teams as needed and alert tuning analysis proposal and suppression analysis proposal.

eXperience and skills required

Degree/Diploma in Computer Science, Computer Engineering, Cyber Defense, Computer Forensics, Management Information Systems or equivalent information security industry recognized certifications (ISC2, ISACA, CCNA, CCNP, SNIA, SANS, CompTIA, MCP, MCSE).
Minimum of 2-3 years’ experience within IT Operations, security operations, infrastructure services support (Systems NT, UX, Backups, DB’s, IT Security or Network management), operations monitoring and end user support.
Minimum of 2-3 years’ hands-on technical knowledge of the applicable technology platform that you will be responsible for: SIEM, Network management, Security and Service Now. Must be able to demonstrate troubleshooting and problem-solving skills. Fluent in written and verbal English.
Understanding of Information Security standards and controls (ISO27001, NIS2, GDPR).
ITIL Version 4 or above, Security certification, Intrusion Detection System, Proxy Support, Security Client Support, Security Devices Administration, Security Server Compliance Monitoring & Reporting, Security Training, Wireshark, Linux, SIEM and XDR tools such as MS Sentinel, ArcSight, Splunk, SumoLogic, MS Defenders, CrowdStrike, Carbon Black, 7AI.

Company benefits

At DXC Technology, we don’t just offer jobs - we build careers. Here’s what you can look forward to when you join us:

Enjoy competitive compensation and grow your career in a fast-paced, international environment.
Benefit from 24 days of paid vacation to rest, explore, and recharge - plus comprehensive medical and life insurance, and monthly food vouchers to support your lifestyle.
Access premium learning platforms, get company-sponsored certifications, and grow your skills with continuous development opportunities tailored to you.
Get recognized through our Employee Recognition Program - your contributions deserve the spotlight.
Refer great talent through our Employee Referral Program and get rewarded for helping shape our future.
Enjoy discounts and special offers with your employee badge - it pays to be part of the team.
Access 24/7 support for you and your family, with a wide range of wellbeing resources to help you thrive.
Join meaningful initiatives that give back to the community and connect you with like-minded colleagues through fun and impactful experiences.

At DXC Technology, we believe strong connections and community are key to our success. Our work model prioritizes in-person collaboration while offering flexibility to support wellbeing, productivity, individual work styles, and life circumstances. We’re committed to fostering an inclusive environment where everyone can thrive.

If you feel comfortable with the above-mentioned requirements, please send us your CV in English.

Please note only shortlisted candidates will be contacted.

DXC Technology stands for equal opportunities, namely, we do not discriminate on the basis of race, religion, color, sex, age, disability, or sexual orientation. All recruitment decisions are based solely on qualifications, skills, knowledge and experience, and relevant business requirements.

Recruitment fraud is a scheme in which fictitious job opportunities are offered to job seekers typically through online services, such as false websites, or through unsolicited emails claiming to be from the company. These emails may request recipients to provide personal information or to make payments as part of their illegitimate recruiting process. DXC does not make offers of employment via social media networks and DXC never asks for any money or payments from applicants at any point in the recruitment process, nor ask a job seeker to purchase IT or other equipment on our behalf. More information on employment scams is available here**.