Cybersecurity Incident Response Officer

• Investigate and respond to level 3 and 4 security incidents.
• Conduct digital forensic investigations and analyze security artifacts across IT, IoT, and OT environments.
• Develop and optimize detection rules and use cases based on the MITRE ATT&CK framework.
• Automate security event responses and develop playbooks to streamline operations within the SOC and CSIRT.
• Coordinate with internal stakeholders and external security providers to communicate incident progress and mitigate risks.

What they ask

• 4+ years of experience in a security-focused role with a core specialization in incident response and analysis.
• Deep expertise in security monitoring using Sentinel SIEM, EDR, and Microsoft Defender.
• Hands-on experience with digital forensics, malware analysis, and artifact analysis for Windows and Linux systems.
• Experienced in SOC Engineering, including use case development and the automation of alert handling.
• Working knowledge of the MITRE ATT&CK framework and ServiceNow SIR modules.
• Experience in the organization and animation of security tabletop exercises.
• Relevant certifications such as GCIH, GCFE, GCFA, GNFA, GCIA, or GREM.
• Strong analytical and problem-solving skills with the ability to identify suspicious activities on complex networks.
• A Bachelor's degree in Computer Science, Information Security, or equivalent professional experience.
• Fluent in English (C1) with working knowledge of Dutch or French.