Cybersecurity Incident Response Officer – Sentinel & SIEM

Pauwels Consulting; Anderlecht; Hybrid; EUR 90,000 - 120,000; Full time

Job summary

Pauwels Consulting is seeking a Cybersecurity Incident Response Officer to strengthen its security operations in Brussels. You will own end-to-end incident lifecycle management, conduct threat hunting, and optimize monitoring systems in a hybrid work setup.

Ideal candidates have 4+ years in security, strong skills in Sentinel SIEM, EDR, Defender, and hands-on forensics across Windows and Linux. International collaboration and MITRE ATT&CK experience are highly valued.

Qualifications

• 4+ years of experience in security with incident response focus.
• Expertise in security monitoring using Sentinel SIEM, EDR, and Defender.
• Experience in digital forensics, malware analysis, and artifact analysis on Windows and Linux.
• Proven SOC engineering experience including alert use-case automation.
• Familiar with MITRE ATT&CK framework and ServiceNow SIR modules.
• Relevant certifications: GCIH, GCFE, GCFA, GNFA, GCIA, GREM.
• Bachelor's degree in CS or Information Security.

Responsibilities

• Investigate and respond to level 3 and 4 security incidents.
• Conduct digital forensics and analyze artifacts across IT/IoT/OT.
• Perform proactive threat hunting using SIEM and custom tools.
• Develop and optimize detection rules and use cases per MITRE ATT&CK.
• Automate security event responses and develop playbooks.
• Coordinate with internal stakeholders and external providers.

Skills

Incident response

Security monitoring

Threat hunting

SOC engineering

Analytical skills

Education

Bachelor's degree in CS/InfoSec

Tools

Sentinel SIEM

EDR

Microsoft Defender

Job description

Our client, a prominent organization in the transport and infrastructure sector, is seeking a Cybersecurity Incident Response Officer to join their cybersecurity team. This role focuses on the end-to-end incident lifecycle, proactive threat hunting, and the optimization of advanced security monitoring systems.

• Investigate and respond to level 3 and 4 security incidents, including network intrusions, malware infections, and data breaches.
• Conduct digital forensic investigations and analyze security artifacts across IT, IoT, and OT environments.
• Perform proactive threat hunting using SIEM and custom tools to identify anomalous behaviors and indicators of compromise.
• Develop and optimize detection rules and use cases based on the MITRE ATT&CK framework.
• Automate security event responses and develop playbooks to streamline operations within the SOC and CSIRT.
• Coordinate with internal stakeholders and external security providers to communicate incident progress and mitigate risks.

• You have 4+ years of experience in a security-focused role with a core specialization in incident response and analysis.
• You possess deep expertise in security monitoring using Sentinel SIEM, EDR, and Microsoft Defender.
• You bring hands-on experience with digital forensics, malware analysis, and artifact analysis for Windows and Linux systems.
• You're experienced in SOC Engineering, including use case development and the automation of alert handling.
• You possess working knowledge of the MITRE ATT&CK framework and ServiceNow SIR modules.
• You have experience in the organization and animation of security tabletop exercises.
• You have obtained relevant certifications such as GCIH, GCFE, GCFA, GNFA, GCIA, or GREM.
• You have strong analytical and problem-solving skills with the ability to identify suspicious activities on complex networks.
• You have a Bachelor's degree in Computer Science, Information Security, or equivalent professional experience.
• You are fluent in English (C1) with working knowledge of Dutch or French.

• Start date: 01/01/2027
• Duration: Until 31/12/2027
• Work regime: Full-time
• Location: Brussels
• Working model: Hybrid (onsite presence required up to 5 days per week)
• Contract: open to both permanent employees and freelancers