CSIRT Analyst

Cegeka UK (CTG); Hasselt; Hybride; EUR 45 000 - 75 000; Plein temps

Avantages offerts par ce poste

Hybrid work model

Top Employer certification

Continuous learning

Career growth

Mobility budget

Résumé du poste

Cegeka is seeking a CSIRT Analyst to join one of Europe’s fastest-growing SOCs. You will handle escalated security alerts, perform DFIR tasks, and participate in threat hunting. You will build and refine detection capabilities in SIEM/xDR and contribute to incident response planning.

The role emphasizes hands-on forensics, threat intelligence collection, and collaboration with red team exercises to strengthen defenses. English fluency is required.

Qualifications

• 3–5 years of experience in a similar role.
• Bachelor or master degree or equivalent through experience.
• Experience in forensically sound acquisition, parsing and analysis of disk, memory images, logs to rebuild cyber incident timelines.

Responsabilités

• Handle security alerts/incidents escalated by SOC Analysts (Tier 2).
• Conduct DFIR assignments and readiness assessments.
• Participate in weekly Threat Hunting using TTPs.
• Perform compromise assessments to identify scope of compromises.
• Collect Threat Intelligence (IOCs and TTPs).
• Contribute to Detection Engineering in SIEM, xDR, etc.
• Collaborate with Red Team on Purple Teaming exercises.
• Co-write processes and procedures for DFIR, Threat Intelligence, Threat Hunting, etc.
• Be part of Incident Response on-call service.

Connaissances

Cyber security

Incident response

Digital forensics

Threat hunting

Threat intelligence

Security monitoring

Proactive mindset

English fluency

Formation

Bachelor's or Master's degree

Outils

CrowdStrike Falcon

MS Defender for Endpoint

SentinelOne

Vectra

Darktrace

CrowdStrike Identity Protection

Description du poste

Do you want to be a part of one of the fastest-growing and largest Security Operations Centers in Europe? Do you have a passion for Cyber Security, especially advanced Managed Detection & Response (MDR)? Does Incident Response, Digital Forensics, Threat Hunting, Threat Intelligence and everything related to Cyber Security feel like second nature to you? Are you a Cyber Defender at heart, driven to strengthen the blue team and help organizations that are under attack? If you answered yes to all of these questions, you might be the perfect fit for our CSIRT Analyst role.

• You handle security alerts/incidents that have been escalated by the SOC Analysts (Tier 2)
• You conduct DFIR assignments, including DFIR readiness assessments
• You participate in the weekly Threat Hunting duty to proactively chase threats through novel Tools, Techniques & Procedures (TTPs)
• You will perform compromise assessments to identify potential compromises and their scope
• You collect Threat Intelligence (IOCs and TTPs)
• You will contribute to Detection Engineering in SIEM, xDR, …
• Together with the Red Team you will do Purple Teaming exercises to test and improve defenses
• You contribute to the creation of playbooks in SOAR
• You will co-write processes and procedures related to DFIR, Threat Intelligence, Threat Hunting, …
• You will be part of our Incident Response on call service.

What You Need To Succeed:

• You have at least 3-5 years of experience in a similar position
• You have a bachelor or master degree or equivalent through experience
• You are able to perform forensically sound acquisition, parsing and analysis of disk, memory images, forensic artifacts and logs in order to rebuild the timeline of events for a cybersecurity incident. Extensive hands‑on experience in this domain of expertise is mandatory
• You have experience and/or interest in working with the following MDR tools: EDR (CrowdStrike Falcon, MS Defender for Endpoint, Sentinel One, ...), NDR (Vectra, Darktrace, ...), xDR (CrowdStrike Identity Protection, MS Defender for Office/Clouds Apps/Identity/...)
• As an analyst or engineer, you already have a good knowledge of Security Monitoring with SIEM technologies
• You are passionate about the following security capabilities: Security Monitoring, Digital Forensics, Incident Response, Threat Intelligence, Threat Hunting, ...
• You have a hands‑on and proactive mindset with a 'can do' mentality
• You speak and write English fluently.

What Are We Offering:

• You will be joining a true Top Employer
• Year after year, Whitelane Research confirms Cegeka’s position as a reliable and leading IT services partner. In 2026, we achieved first place in Security Services for the fourth consecutive year, and a shared second place in both Cloud & Infrastructure Services and Network & Connectivity
• We ask a lot of (talents) from you. Fortunately, you also get a lot in return! Competence and character are essential to us, in addition to experience and ambitions. Cegeka continuously invests in talent management so that every employee can realize their potential
• We use a framework aimed at fair compensation, ensuring employees are paid based on their role, experience, and performance, regardless of gender or other non-job-related characteristics. An electric car with charge card or a mobility budget, meal vouchers, eco vouchers, an interesting group and hospitalization insurance, a mobile phone subscription, a fixed expense allowance, a powerful laptop and the option to give your salary package your own accent thanks to our Flex Reward Plan
• Flexible working hours and a nice work/life balance
• A top team: in which new fresh ideas and initiatives are always welcome! Team events, happy hours and an increasingly legendary company party are also part of this
• Continuous learning: knowledge sharing meetings, participation in conferences and external training. Knowledge sharing and learning are key!
• Depending on your own interests and initiatives, Cegeka offers various horizontal and vertical career paths
• We value sustainability by pursuing carbon neutrality with the electrification of our fleet and an environmentally friendly data center. We develop innovative solutions with a positive impact on the environment, people and society, and strive for an inclusive and diverse work environment where everyone is valued and heard
• Would you like to join us as a freelancer? Then we offer you a market-conform daily rate and a range of benefits.

Benefits

• Market-compliant salary with attractive extra benefits.
• Continuous learning via hackathons, innovation centers, events,...
• Flexible working hours supporting your work/life balance.
• Career growth with horizontal and vertical development paths.
• Hybrid work model blending office and remote work efficiently.
• Personal guidance from managers, coaches, and sparring partners.
• ESG: lower emissions, foster inclusion and drive sustainability in IT.
• Cegeka proudly holds the Top Employer certificate.
• Team events, happy hours, sports events, and epic company festival.