CSIRT Analyst

Editx; Heusden-Zolder; Sur place; EUR 60 000 - 80 000; Plein temps

Résumé du poste

Editx is seeking a CSIRT Analyst to join one of Europe’s fastest-growing SOCs. You will handle security alerts and incidents escalated by the SOC Analysts (Tier 2) and perform DFIR assignments to assess defenses and scope.

You will participate in weekly threat hunting, collect IOCs/TTPs, contribute to detection engineering in SIEM and xDR, and co-write procedures for DFIR and Threat Intelligence. This role includes on-call Incident Response duties to strengthen client defenses.

Qualifications

• Experience in cyber security operations and incident response.
• Familiarity with DFIR, threat hunting and threat intelligence is a plus.

Responsabilités

• Handle security alerts/incidents escalated by the SOC Analysts (Tier 2).
• Conduct DFIR assignments, including DFIR readiness assessments.
• Participate in weekly Threat Hunting duty to proactively chase threats using TTPs.
• Perform compromise assessments to identify potential compromises and their scope.
• Collect Threat Intelligence (IOCs and TTPs).
• Contribute to Detection Engineering in SIEM, xDR, etc.
• Collaborate with Red Team on Purple Teaming exercises to test defenses.
• Co-write processes and procedures related to DFIR, Threat Intelligence, Threat Hunting, etc.
• Be part of Incident Response on-call service.

Description du poste

Do you want to be a part of one of the fastest-growing and largest Security Operations Centers in Europe? Do you have a passion for Cyber Security, especially advanced Managed Detection & Response (MDR)? Does Incident Response, Digital Forensics, Threat Hunting, Threat Intelligence and everything related to Cyber Security feel like second nature to you? Are you a Cyber Defender at heart, driven to strengthen the blue team and help organizations that are under attack? If you answered yes to all of these questions, you might be the perfect fit for our CSIRT Analyst role.

• You handle security alerts/incidents that have been escalated by the SOC Analysts (Tier 2)
• You conduct DFIR assignments, including DFIR readiness assessments
• You participate in the weekly Threat Hunting duty to proactively chase threats through novel Tools, Techniques & Procedures (TTPs)
• You will perform compromise assessments to identify potential compromises and their scope
• You collect Threat Intelligence (IOCs and TTPs)
• You will contribute to Detection Engineering in SIEM, xDR, …
• Together with the Red Team you will do Purple Teaming exercises to test and improve defenses
• You contribute to the creation of playbooks in SOAR
• You will co-write processes and procedures related to DFIR, Threat Intelligence, Threat Hunting, …
• You will be part of our Incident Response on call service.