Multilingual CSIRT Service Lead - 24/7 Incident Response

Tata Consultancy Services Limited; Brussel Hoofdstad; On-site; EUR 90,000 - 130,000; Full time

Job summary

Tata Consultancy Services Limited in Belgium seeks a CSIRT Service Lead to drive the operational delivery of the Managed CSIRT service and to act as the primary interface between the customer, CSIRT, SOC and technical teams.

You will lead incident response, service leadership and customer engagement, guiding transition to steady-state operations and coordinating major incidents across cross-functional teams in a multilingual environment.

Qualifications

• Experience leading CSIRT, incident response, SOC or security operations in a large enterprise.
• Proven track record of leading cybersecurity operations and major security incidents.
• Strong knowledge of IR, threat hunting, DFIR, SIEM/XDR and security governance.
• Experience with enterprise security tools (SIEM/XDR) and customer-facing engagements.

Responsibilities

• Lead day-to-day Managed CSIRT operations and coordinate the 24x7 delivery organization.
• Lead and coordinate P1/P2 and major cybersecurity incidents.
• Oversee incident investigation, escalation, containment and post-incident follow-up.
• Coordinate Incident Response, Threat Hunting, DFIR and Cyber Security Advisory activities.
• Monitor service performance against SLAs/KPIs and drive improvements.
• Lead customer service reviews and governance meetings.
• Manage operational risks, escalations and improvements.
• Support transition, knowledge transfer and BAU service commencement.
• Maintain CSIRT processes, runbooks and escalation procedures.
• Coordinate with SOC, Security, IAM, Infrastructure and Service Management.

Skills

CSIRT

Incident Response

Customer engagement

Stakeholder management

Cross-functional leadership

Tools

Microsoft Sentinel

Defender XDR

ServiceNow IR

EDR

Job description

Tata Consultancy Services Limited in Belgium seeks a CSIRT Service Lead to drive the operational delivery of the Managed CSIRT service and to act as the primary interface between the customer, CSIRT, SOC and technical teams.

You will lead incident response, service leadership and customer engagement, guiding transition to steady-state operations and coordinating major incidents across cross-functional teams in a multilingual environment.