Senior CSIRT Security Engineer

Key Responsibilities

• Incident Handling & Response: Manage and respond to cybersecurity incidents.

• Investigations & Forensics: Conduct investigations, including digital forensics.

• Data Leak Protection: Implement and monitor data leak protection measures.

• Phishing Identification: Detect and respond to phishing attempts.

• Threat Hunting: Conduct threat hunting campaigns to proactively identify risks.

• Cyber Threat Intelligence: Produce and analyse cyber threat intelligence.

• Vulnerability Management: Identify, assess, and manage vulnerabilities.

Core Competencies & Education

• Preferably MSc in Information Security.

• Fluent in English (written & verbal); French is a plus.

• Autonomy and ability to deliver within set timeframes.

• Strong organisational and analytical skills.

• Good interpersonal and communication skills; effective team player.

• Ability to function effectively in a matrix structure.

• Certifications such as GREM, Blue Team Level 1 (BTL1), Blue Team Level 2 (BTL2), Certified Red Team Expert (CRTE), or Certified Red Team Professional (CRTP) are a plus.

Experience & Technical Skills

• Proven record as an incident handler or cyber threat intelligence (CTI) analyst.

• Proven experience in digital forensics.

• Experience using ServiceNow.

• Experience with EDR (e.g., Tanium), Antivirus (e.g., Trellix), SIEM (e.g., Elastic Search), and security tools (Netcraft, Virustotal, Symantec DLP, Ghidra).

• Detailed technical knowledge of attacker tactics, techniques, and procedures.

• Interest in all aspects of security research and development.

Engagement & Methodology

• Engagement type: Time & Material (T&M).

• Delivery methodology: Agile with bi-weekly sprints.

• Governance: Quarterly planning, daily meetings, sprint planning, demos, and retrospectives.