Remote CSIRT Analyst: Proactive Incident Response

Corda Campus nv; Hasselt; Remote; EUR 70,000 - 100,000; Full time

Benefits offered by this job

Top Employer

Whitelane Award recognition

Hybrid work options

Flexible work hours

Mobility budget

Meal vouchers

Eco-cheques

Company laptop

Flex Reward Plan

Team events

Job summary

Cegeka is hiring for a Cyber Security Specialist to join a leading Security Operations Center. You will handle escalated alerts, run DFIR tasks, and contribute to proactive threat hunting, threat intelligence, and detection engineering.

The role supports remote work with hybrid office options in Hasselt and surrounding areas. We seek 3–5 years in a similar role and a relevant degree, plus hands-on forensic skills and experience with MDR tools.

Qualifications

• Minimum 3–5 years of experience in a similar security role.
• Bachelor or master degree, or equivalent by experience.
• Experience collecting and analyzing forensic artifacts, logs to reconstruct incident timeline.
• Experience with MDR tools and security monitoring.
• Fluent in English.

Responsibilities

• Handle alerts and incidents escalated by SOC analysts (Tier 2).
• Perform DFIR assignments including DFIR readiness assessments.
• Participate in weekly Threat Hunting to detect new threats with tools/TPPs.
• Conduct compromise assessments to map impact.
• Collect Threat Intelligence (IOCs and TTPs).
• Contribute to Detection Engineering within SIEM/xDR.
• Collaborate on Purple Team exercises with Red Team.
• Contribute to playbooks in SOAR.
• Help develop DFIR/Threat Intelligence/Threat Hunting processes.
• Participate in on-call Incident Response service.

Skills

Cyber security

DFIR

Threat Hunting

Threat Intelligence

SIEM monitoring

Blue team

English fluency

Education

Bachelor's degree in Cyber Security

Master's degree in related field

Tools

CrowdStrike Falcon

MS Defender for Endpoint

SentinelOne

Vectra

Darktrace

SOAR

Job description

Cegeka is hiring for a Cyber Security Specialist to join a leading Security Operations Center. You will handle escalated alerts, run DFIR tasks, and contribute to proactive threat hunting, threat intelligence, and detection engineering.

The role supports remote work with hybrid office options in Hasselt and surrounding areas. We seek 3–5 years in a similar role and a relevant degree, plus hands-on forensic skills and experience with MDR tools.