Are you an Incident Responder? Think bigger about your next move!

Build your future with QnR Group.
JOIN THE NEXT EUROPEAN TECHNOLOGY POWERHOUSE 🚀

Incident Responder | SysteCom, member of QnR Group

Role overview

We are looking for an Incident Responder to help clients contain cyber incidents, understand root causes and restore operations. This role combines technical investigation, coordinated response, stakeholder communication and post-incident improvement.

About QnR Group

QnR Group is a technology group with 35 years of experience, 8 companies, 4 delivery centers and 210+ professionals across Greece, Belgium, Cyprus and Poland. Listed on the Athens Stock Exchange since 2000, we deliver mission-critical digital transformation projects for the public and private sector. The Group’s capabilities covers software engineering, enterprise and generative AI, cybersecurity, cloud infrastructure, SAP and ServiceNow solutions, core banking and maritime intelligence.

About SysteCom

SysteCom, a member of QnR Group, specializes in cybersecurity, digital resilience and IT infrastructure. The company delivers solutions and services that help organizations protect their systems and data, strengthen operational continuity and modernize their technology environments. Bringing together security and infrastructure expertise, SysteCom supports businesses across sectors in building secure, reliable and resilient digital operations.

Requirements

What you'll work on:

• Own or support incident-response activities from validation through recovery
• Analyse endpoints, identity, network and cloud evidence to determine scope and root cause
• Coordinate containment and remediation with IT, cloud, legal and business teams
• Maintain timelines, evidence and clear incident reports
• Run lessons-learned reviews and convert findings into lasting improvements

What you bring:

• Demonstrable experience handling cybersecurity incidents in enterprise, public-sector, MSSP or multi-client environments
• Strong understanding of preparation, detection, analysis, containment, eradication, recovery and lessons learned
• Hands-on ability to analyse endpoint, identity, network, email and cloud evidence using SIEM, EDR/XDR and forensic-triage tooling
• Knowledge of evidence preservation, chain of custody, incident timelines and defensible documentation
• Ability to coordinate technical and non-technical stakeholders during time-sensitive incidents and communicate impact, status and decisions clearly
• Understanding of common attacker techniques, lateral movement, persistence, credential abuse and data-exfiltration patterns
• For senior candidates, experience leading major incidents, improving response playbooks and mentoring responders

Required certifications:

Required: at least one incident-response or forensics certification, such as GIAC GCIH, GIAC GCFA, EC-Council ECIH or an equivalent recognised certification

Senior candidates should also hold a broader cybersecurity certification such as CISSP, GSEC, CISM or equivalent

Nice to have:

• GCIH, GCFA, ECIH, SC-200 or equivalent
• Threat-intelligence, malware-analysis or crisis-management experience