Senior SOC L3 Incident Response Lead — OT/CSIRT

OKATIM Iberica SA; Brussel; Hybrid; EUR 90,000 - 130,000; Full time

Job summary

OKATIM Iberica SA in Brussels is seeking a highly experienced Senior SOC L3 / CSIRT Incident Response Coordinator to lead and coordinate complex cybersecurity incidents across IT and OT environments. You will act as the top technical escalation point, manage cross-functional teams, and drive continuous improvement of incident response playbooks and security operations.

The role requires a minimum of 10 years in cybersecurity operations, hands-on SOC L3 experience, and mandatory OT/ICS expertise.

Qualifications

• 10+ years of experience in cybersecurity operations and incident response.
• Proven SOC Level 3 activities with advanced threat investigation and incident escalation.
• Experience in team management and operational coordination within SOC/CSIRT environments.
• Mandatory OT/ICS cybersecurity experience.
• Fluent English with professional proficiency in French or Dutch.

Responsibilities

• Lead end-to-end cybersecurity incident response activities from triage to post-incident review.
• Act as the highest technical escalation point (SOC Level 3) for investigations and threat assessments.
• Coordinate SOC analysts, incident response teams, OT/IT specialists and external stakeholders during incidents.
• Provide technical leadership and support effective team management during critical incidents.
• Develop and improve incident response playbooks and operational processes.
• Coordinate threat analysis, vulnerability remediation and incident follow-ups.
• Support OT/ICS cybersecurity operations prioritizing continuity and availability.
• Monitor performance, report on incidents and contribute to SOC maturity.
• Collaborate with engineering teams to enhance SIEM/EDR detection and use cases.
• Organize cybersecurity exercises and lessons-learned sessions.

Skills

SOC L3

Incident response

Team leadership

Threat detection

OT security

Tools

SIEM

EDR

Azure DevOps

Job description

OKATIM Iberica SA in Brussels is seeking a highly experienced Senior SOC L3 / CSIRT Incident Response Coordinator to lead and coordinate complex cybersecurity incidents across IT and OT environments. You will act as the top technical escalation point, manage cross-functional teams, and drive continuous improvement of incident response playbooks and security operations.

The role requires a minimum of 10 years in cybersecurity operations, hands-on SOC L3 experience, and mandatory OT/ICS expertise.