Senior DFIR & XDR Tools Engineer (NATO-Scale SOC)

Spektrum; Henegouwen; Sur place; EUR 60 000 - 90 000; Plein temps

Résumé du poste

Spektrum seeks a skilled digital forensics/XDR specialist to own deployment, configuration and ongoing health of defense-grade tools. You will work with investigators to ensure reliable remote acquisition and scalable forensics in a high-security environment, while coordinating with NATO and related agencies.

The role requires 5+ years in deploying forensics/XDR tools, strong scripting skills, and experience with Azure/Defender for Endpoint.

Qualifications

• Bachelor's degree in a related field and 3 years post-related experience or 10+ years progressive experience.
• 5+ years deploying or managing forensics and XDR tools in complex environments.
• 2+ years with remote acquisition tooling (Fidelis and/or F-Response) at scale.
• 2+ years with Jira and Confluence.
• Strong understanding of forensically sound acquisition principles and host-level issue diagnosis.
• Scripting/automation: PowerShell, Python, Bash, Batch, Ansible.
• Experience with Red Hat Linux and fleet management via Ansible.
• Experience with Microsoft Azure and Defender for Endpoint; GIAC or equivalent certification.

Responsabilités

• Deploy, configure, monitor, troubleshoot and maintain forensics and XDR tools.
• Translate user feedback into usability and effectiveness improvements including automation scripts.
• Work onsite at SHAPE, Mons for coordination and access requirements.
• Support change management processes for tools and capabilities.
• Coordinate information across NCSC, NCIA and NATO/external stakeholders.

Connaissances

3+ years post-related experience

5+ years deploying XDR tools

Remote acquisition tooling

Forensic principles

Host-level issue diagnosis

Scripting: PowerShell/Python/Bash

Documentation & change control

Azure & Defender for Endpoint

Military/government environment

Formation

Bachelor's degree in a related field

Outils

Jira

Confluence

Fidelis

F-Response

PowerShell

Python

Bash

Batch

Ansible

Red Hat Linux

Microsoft Azure

Microsoft Defender for Endpoint

GIAC certification

Description du poste

Spektrum seeks a skilled digital forensics/XDR specialist to own deployment, configuration and ongoing health of defense-grade tools. You will work with investigators to ensure reliable remote acquisition and scalable forensics in a high-security environment, while coordinating with NATO and related agencies.

The role requires 5+ years in deploying forensics/XDR tools, strong scripting skills, and experience with Azure/Defender for Endpoint.