Senior Cyber Incident Response Engineer

Yechte Consulting Ltd; Brussel; Sur place; EUR 70 000 - 100 000; Plein temps

Résumé du poste

Yechte Consulting Ltd is seeking a seasoned security professional to lead incident response across IT, OT, and IoT environments. You will investigate high‑severity incidents, perform digital forensics, and coordinate with cross-functional teams to mitigate threats.

The role emphasizes threat hunting, SIEM optimization, and development of incident response playbooks. Fluency in English is required; knowledge of French or Dutch is a plus.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or equivalent practical experience.
• At least 4 years of experience in a security-related role with incident response focus.
• Hands-on experience investigating and responding to security incidents including malware infections, intrusions, and data breaches.
• Experience with digital forensics, incident response, security monitoring, and threat intelligence.
• Strong knowledge of security technologies and tools including SIEM, EDR, IDS/IPS, and firewalls.
• Experience with Microsoft Sentinel SIEM, Microsoft Defender, and EDR solutions.
• Ability to read and analyze Windows, Linux, and network logs and artifacts for IOC.
• Experience with threat hunting and investigating suspicious activities across networks and systems.
• Experience with SOC engineering, detection gaps, and automating alert handling.
• Experience with incident response tools like ServiceNow SIR.
• Familiarity with MITRE ATT&CK framework and developing detection rules.

Responsabilités

• Investigate and respond to level 3/4 security incidents including malware infections, intrusions, and data breaches.
• Conduct forensic investigations, coordination, and analysis of security incidents across IT, IoT, or OT.
• Collaborate with SOC, CSIRT, and other teams to identify and mitigate security risks.
• Develop and implement incident response plans and provide guidance on security best practices.
• Communicate incident progress to internal and external stakeholders.
• Proactively identify threats using SIEM and custom detection tools.
• Conduct regular threat hunting to detect hidden threats.
• Analyze logs and artifacts from Windows, Linux, and network sources for signs of compromise.
• Read and understand logs to analyze system artifacts for indicators of compromise.
• Develop, maintain, and optimize SIEM systems and create use cases based on MITRE ATT&CK.
• Write playbooks for SOC to ensure consistent incident response.
• Automate responses to SIEM and EDR events to focus on critical tasks.
• Contribute to rolling out new security products, automation, and SOC improvements.
• Organize tabletop exercises and facilitate them.
• Interact professionally with staff, affiliates, and security providers.

Connaissances

Incident response

Digital forensics

Threat intelligence

Threat hunting

Tabletop exercises

Scripting/Automation

MITRE ATT&CK

Log analysis

Communication

Stakeholder management

Formation

Bachelor's degree in Computer Science or Information Security

Outils

Microsoft Sentinel

Microsoft Defender

EDR solutions

SIEM

IDS/IPS

Firewalls

Description du poste

Yechte Consulting Ltd is seeking a seasoned security professional to lead incident response across IT, OT, and IoT environments. You will investigate high‑severity incidents, perform digital forensics, and coordinate with cross-functional teams to mitigate threats.

The role emphasizes threat hunting, SIEM optimization, and development of incident response playbooks. Fluency in English is required; knowledge of French or Dutch is a plus.