Cybersecurity Incident Response Officer – Sentinel & SIEM

Editx; Anderlecht; On-site; EUR 60,000 - 90,000; Full time

Job summary

Editx is seeking a security operations professional to handle high-level incidents and investigations across IT, OT, and IoT environments. You will analyze artifacts, develop detection rules, and automate response playbooks to improve SOC/CSIRT efficiency.

Join a team that coordinates with internal and external stakeholders to mitigate risks and preserve information security across the organization in Brussels metropolitan area.

Responsibilities

• Investigate and respond to level 3 and 4 security incidents, including network intrusions, malware infections, and data breaches.
• Conduct digital forensic investigations and analyze security artifacts across IT, IoT, and OT environments.
• Perform proactive threat hunting using SIEM and custom tools to identify anomalous behaviors and indicators of compromise.
• Develop and optimize detection rules and use cases based on the MITRE ATT&CK framework.
• Automate security event responses and develop playbooks to streamline operations within the SOC and CSIRT.
• Coordinate with internal stakeholders and external security providers to communicate incident progress and mitigate risks.

Job description

Responsibilities

• Investigate and respond to level 3 and 4 security incidents, including network intrusions, malware infections, and data breaches.
• Conduct digital forensic investigations and analyze security artifacts across IT, IoT, and OT environments.
• Perform proactive threat hunting using SIEM and custom tools to identify anomalous behaviors and indicators of compromise.
• Develop and optimize detection rules and use cases based on the **MITRE ATT&CK** framework.
• Automate security event responses and develop playbooks to streamline operations within the SOC and CSIRT.
• Coordinate with internal stakeholders and external security providers to communicate incident progress and mitigate risks.