Senior Incident Response Consultant

Nviso; Brussel Hoofdstad; On-site; EUR 60,000 - 90,000; Full time

Benefits offered by this job

Training budget

Company car

Flexible hours

Home office possibilities

Team events

Personal coach

SANS training support

Job summary

NVISO in Belgium is seeking an Incident Response consultant to join our Incident Response team. You will perform host and network forensics, log analysis, and support automation and threat intelligence collaborations to detect and respond to cyber incidents.

You will work with cross-functional teams, deliver insights, participate in tabletop exercises, and help extend our tooling. A passion for cyber security and hands-on incident response experience are essential.

Qualifications

• Citizenship in one of the NATO member states.
• 2+ years hands-on experience in incident response / forensics.
• Strong knowledge of intrusion analysis, incident response and forensics.
• Up-to-date on cyber security threats and attacker TTPs.

Responsibilities

• Perform host forensics, network forensics and log analysis in support of incident response investigations.
• Analyze and correlate log data, malware behavior, system state changes to reconstruct activity.
• Support automation projects in digital forensics and incident response tooling.
• Perform threat hunting engagements including planning, requirements, execution and reporting.
• Support threat intelligence services for customers.
• Assist in tabletop exercises and forensic readiness assessments.

Job description

It all starts with the mission: NVISO is here to protect European society from potentially devastating cyber attacks! This means we offer cyber security services to private and governmental organizations to help them better prepare for, prevent, detect and respond to cyber security incidents.

All of this is built on four fundamental values that define who we are: We are Proud, We Break Barriers, We Care and No BS!

Tasks

As an Incident Response consultant you will support the NVISO Incident Response team in responding to a wide range of cyber incidents. In addition to Incident Response and forensic engagements, you will be working closely with the rest of the team on further building and automating some of our Incident Response processes and analytical capabilities. Furthermore, you will work closely with the Threat Intelligence team to support in their service offering and build automations where possible.

• Perform host forensics, network forensics and log analysis in support of incident response investigations;

• Analyze and correlate log data, malicious software behavior, system state changes, and other information across multiple systems to forensically reconstruct malicious activity and impacts;

• Support improvement projects related to automation in the field of digital forensics as well as the definition and further development of NVISO tools and incident response processes;

• Perform threat hunting engagements within customer environments including the technical planning of the hunt, defining the requirements, execution and reporting;

• Support in the various threat intelligence services provided to our customers;

• Assist in other engagements such as tabletop exercises, incident and forensic readiness assessments, threat intelligence related projects, etc.

Requirements

• You hold citizenship in one of the 32 NATO member states;

• 2+ years hands-on experience;

• Strong knowledge of Intrusion Analysis, Incident Response and Forensics;

• You are up to date on the latest cyber security threats and the Tactics, Techniques and Procedures (TTPs) attackers are currently using;

• Excellent analytical and problem-solving skills, with an eye for detail;

• Effective communication and interpersonal skills to work collaboratively with clients and cross-functional teams;

Optional

• Experience with scripting and automation is a plus.

Benefits

At NVISO, we care. We are committed to offering you a highly competitive remuneration package including financial and non-financial components:

• A training budget of 10.000€ and 10 days every two years

• Company car + Belgian fuel car

• Working and learning from the best people in the European cyber security industry. We have multiple SANS Instructors working at NVISO, our staff has presented at popular hacking conferences (BlackHat, BruCON, OWASP, etc) and all of our technical staff can acquire deep technical security certifications (GSE, GXPN, GREM, GCFA, OSCP, etc)

• An entrepreneurial and agile company, where you will be stimulated and supported in driving new initiatives (either through internal innovation or by improving our service offering), without losing sight of having fun!

• Regular team-building and fun events throughout the year;

• Our commitment to coach and counsel you and help you grow; each employee receives a personal coach within the team, whose role is to ensure your well-being and helps you grow in your career!

• Flexible working hours and home office possibilities

• Flex Reward Plan

• 32 holidays