DFIR & XDR Tools Engineer – Secure Forensics Specialist

Spektrum; Henegouwen; On-site; EUR 70,000 - 105,000; Full time

Job summary

Spektrum seeks experienced specialists to deploy and maintain digital forensics and XDR tooling within a high-security NATO environment. You will work with investigators to ensure remote acquisition, endpoint forensics and detection tooling operate reliably at scale.

Role requires 5+ years of hands-on experience with forensics, XDR, and remote acquisition tools, plus strong scripting (PowerShell, Python, Bash) and Jira/Confluence usage.

Qualifications

• Bachelor's degree or 10+ years equivalent experience in a related field.
• 5+ years deploying/managing forensics and XDR tools in complex environments.
• 2+ years with remote acquisition tooling (Fidelis and/or F-Response).
• 2+ years with Jira and Confluence.
• Strong understanding of forensically sound acquisition principles.
• Windows Server/Desktop administration and event logs.
• Ability to diagnose host-level issues affecting forensic tools.
• Scripting/automation: PowerShell, Python, Bash, Batch, Ansible.

Responsibilities

• Deploy, configure, monitor, troubleshoot and maintain digital forensics and XDR tools in line with ITSM processes.
• Translate user feedback into usability improvements, including automation scripts and configurations.
• Work onsite at SHAPE, Mons for coordination and access requirements.
• Support change management processes for section tools and capabilities.
• Coordinate information across NCSC, NCIA and NATO/external stakeholders.

Skills

Digital forensics

XDR tools deployment

Remote acquisition tooling

Forensic scripting

Documentation

Education

Bachelor's degree in related field

10+ years equivalent experience

Tools

Jira

Confluence

PowerShell

Python

Bash

Ansible

Fidelis

F-Response

Job description

Spektrum seeks experienced specialists to deploy and maintain digital forensics and XDR tooling within a high-security NATO environment. You will work with investigators to ensure remote acquisition, endpoint forensics and detection tooling operate reliably at scale.

Role requires 5+ years of hands-on experience with forensics, XDR, and remote acquisition tools, plus strong scripting (PowerShell, Python, Bash) and Jira/Confluence usage.