Senior SOC L3 – Incident Response Lead (OT/ICS)

OKATIM Iberica SA; Brussel; Hybrid; EUR 110,000 - 140,000; Full time

Job summary

OKATIM Iberica SA is seeking a highly experienced Senior SOC L3 / CSIRT Incident Response Coordinator to join a challenging cybersecurity project in Brussels. The role combines advanced incident response with operational leadership across IT and OT environments.

You will lead end-to-end incident response, act as the top escalation point, coordinate multiple teams, and continually improve security operations and playbooks.

Qualifications

• Ten+ years in cybersecurity operations and incident response.
• Experience at SOC Level 3 (L3) handling advanced threats and escalation.
• Proven ability to lead teams and coordinate across SOC/CSIRT.
• Mandatory OT/ICS cybersecurity experience.
• Strong incident response methodologies, threat detection, containment, remediation and recovery.

Responsibilities

• Lead and coordinate end-to-end cybersecurity incident response activities from triage to post-incident review.
• Act as the highest technical escalation point (SOC Level 3) for in-depth investigations.
• Coordinate SOC analysts, incident response teams, IT/OT specialists and external stakeholders during incidents.
• Provide technical leadership and support effective team management during critical incidents.
• Develop, maintain and improve incident response procedures, playbooks and processes.
• Coordinate threat analysis, remediation and follow-up activities.
• Support cybersecurity operations in OT/ICS environments considering continuity and availability.
• Monitor performance, produce reports and drive SOC/CSIRT maturity improvements.
• Collaborate with engineering to enhance SIEM/EDR detection capabilities.
• Organise and participate in cybersecurity exercises and lessons-learned sessions.

Skills

SOC Level 3

Incident response

OT/ICS security

Team leadership

Threat investigations

Coordination

English fluency

French/Dutch

Security operations

Job description

OKATIM Iberica SA is seeking a highly experienced Senior SOC L3 / CSIRT Incident Response Coordinator to join a challenging cybersecurity project in Brussels. The role combines advanced incident response with operational leadership across IT and OT environments.

You will lead end-to-end incident response, act as the top escalation point, coordinate multiple teams, and continually improve security operations and playbooks.