CSIRT Analyst: DFIR, Threat Hunting & Incident Response

Cegeka UK (CTG); Hasselt; Hybride; EUR 45 000 - 75 000; Plein temps

Avantages offerts par ce poste

Hybrid work model

Top Employer certification

Continuous learning

Career growth

Mobility budget

Résumé du poste

Cegeka is seeking a CSIRT Analyst to join one of Europe’s fastest-growing SOCs. You will handle escalated security alerts, perform DFIR tasks, and participate in threat hunting. You will build and refine detection capabilities in SIEM/xDR and contribute to incident response planning.

The role emphasizes hands-on forensics, threat intelligence collection, and collaboration with red team exercises to strengthen defenses. English fluency is required.

Qualifications

• 3–5 years of experience in a similar role.
• Bachelor or master degree or equivalent through experience.
• Experience in forensically sound acquisition, parsing and analysis of disk, memory images, logs to rebuild cyber incident timelines.

Responsabilités

• Handle security alerts/incidents escalated by SOC Analysts (Tier 2).
• Conduct DFIR assignments and readiness assessments.
• Participate in weekly Threat Hunting using TTPs.
• Perform compromise assessments to identify scope of compromises.
• Collect Threat Intelligence (IOCs and TTPs).
• Contribute to Detection Engineering in SIEM, xDR, etc.
• Collaborate with Red Team on Purple Teaming exercises.
• Co-write processes and procedures for DFIR, Threat Intelligence, Threat Hunting, etc.
• Be part of Incident Response on-call service.

Connaissances

Cyber security

Incident response

Digital forensics

Threat hunting

Threat intelligence

Security monitoring

Proactive mindset

English fluency

Formation

Bachelor's or Master's degree

Outils

CrowdStrike Falcon

MS Defender for Endpoint

SentinelOne

Vectra

Darktrace

CrowdStrike Identity Protection

Description du poste

Cegeka is seeking a CSIRT Analyst to join one of Europe’s fastest-growing SOCs. You will handle escalated security alerts, perform DFIR tasks, and participate in threat hunting. You will build and refine detection capabilities in SIEM/xDR and contribute to incident response planning.

The role emphasizes hands-on forensics, threat intelligence collection, and collaboration with red team exercises to strengthen defenses. English fluency is required.