Senior Incident Response Consultant

NVISO GmbH; Brussel Hoofdstad; Remote; EUR 60,000 - 90,000; Full time

Benefits offered by this job

Training budget and days off

Company car and charging card

SANS / security certifications support

Flexible hours, WFH and international/

Personal coaching

Team-building events

Job summary

NVISO GmbH is seeking an Incident Response consultant to join the team and help protect clients by responding to a wide range of cyber incidents. You will support IR and forensic engagements, and work with Threat Intelligence to build automations and enhance services.

You will collaborate with cross-functional teams, perform investigations, and contribute to developing NVISO tools and processes, while staying abreast of evolving threats and TTPs in the cyber security landscape.

Qualifications

• Citizenship in one of the NATO member states
• At least 2 years hands-on experience in incident response, forensics or related security investigations
• Strong knowledge of intrusion analysis, incident response and forensics
• Up-to-date on current cyber threats and attacker TTPs
• Excellent analytical and problem-solving skills
• Effective communication and collaboration with clients and cross-functional teams
• Optional scripting/automation experience beneficial

Responsibilities

• Perform host forensics, network forensics and log analysis to support investigations
• Analyze and correlate log data, malware behavior and system changes to reconstruct incidents
• Contribute to automation projects and develop NVISO incident response processes
• Conduct threat hunting engagements including planning, requirements, execution and reporting
• Support threat intelligence services provided to clients
• Assist in tabletop exercises, readiness assessments and related projects

Skills

Incident response

Forensics

Log analysis

Threat hunting

Automation/scripting

Communication

Job description

It all starts with the mission: NVISO is here to protect European society from potentially devastating cyber attacks! This means we offer cyber security services to private and governmental organizations to help them better prepare for, prevent, detect and respond to cyber security incidents.

All of this is built on four fundamental values that define who we are: We are Proud, We Break Barriers, We Care and No BS!

What will you do?

As an Incident Response consultant you will support the NVISO Incident Response team in responding to a wide range of cyber incidents. In addition to Incident Response and forensic engagements, you will be working closely with the rest of the team on further building and automating some of our Incident Response processes and analytical capabilities. Furthermore, you will work closely with the Threat Intelligence team to support in their service offering and build automations where possible.

• Perform host forensics, network forensics and log analysis in support of incident response investigations;
• Analyze and correlate log data, malicious software behavior, system state changes, and other information across multiple systems to forensically reconstruct malicious activity and impacts;
• Support improvement projects related to automation in the field of digital forensics as well as the definition and further development of NVISO tools and incident response processes;
• Perform threat hunting engagements within customer environments including the technical planning of the hunt, defining the requirements, execution and reporting;
• Support in the various threat intelligence services provided to our customers;
• Assist in other engagements such as tabletop exercises, incident and forensic readiness assessments, threat intelligence related projects, etc.

Requirements

• You hold citizenship in one of the 32 NATO member states;
• 2+ years hands-on experience;
• Strong knowledge of Intrusion Analysis, Incident Response and Forensics;
• You are up to date on the latest cyber security threats and the Tactics, Techniques and Procedures (TTPs) attackers are currently using;
• Excellent analytical and problem-solving skills, with an eye for detail;
• Effective communication and interpersonal skills to work collaboratively with clients and cross-functional teams;

Optional

• Experience with scripting and automation is a plus.

What do we offer

At NVISO, we care. We are committed to offering you a highly competitive remuneration package including financial and non-financial components:

• A training budget of 10.000€ and 10 days every 2 years
• Company car and Belgian charging card
• Working and learning from the best people in the European cyber security industry. We have multiple SANS Instructors working at NVISO, our staff has presented at popular hacking conferences (BlackHat, BruCON, OWASP, etc) and all of our technical staff can acquire deep technical security certifications (GSE, GXPN, GREM, GCFA, OSCP, etc)
• An entrepreneurial and agile working environment, where you will be challenged, stimulated and supported in driving new initiatives (either through internal innovation or by improving our service offering), without losing sight of having fun!
• Regular team-building and fun events throughout the year;
• Our commitment to coach and counsel you and help you grow; each employee receives a personal coach within the team, whose role is to ensure your well‑being and helps you grow in your career!
• Flexible working hours, working from home and even the possibility to work from abroad;