Cyber defense specialist incident response

Forensic Focus; Weert; Hybrid; EUR 66,000 - 84,000; Full time

Job summary

Forensic Focus is seeking a senior Cyber Defense Incident Response professional in Weert, Netherlands, operating in a hybrid role. You will lead end-to-end incident response, conduct digital forensics, and translate findings into improved playbooks and SOC processes.

The position requires substantial DFIR experience, knowledge of attack techniques, and hands-on malware and log analysis. A bilingual Dutch/English environment is stated, with on-call duties in the rotation.

Qualifications

• Substantial experience in DFIR, incident response or a comparable cybersecurity role.
• Demonstrable knowledge of attack techniques and threat actor TTPs, ransomware and malware.
• Hands-on experience with log analysis and endpoint investigation.

Responsibilities

• Lead end-to-end incident response across the full lifecycle from preparation to lessons learned.
• Conduct digital forensic investigations, analyse malware, reconstruct attacker behaviour.
• Translate findings into improved playbooks, detection logic and automated SOC processes.
• Participate in a 24/7 on-call rota.

Skills

DFIR experience

Incident response

TTP knowledge

Ransomware

Malware analysis

Forensic tooling

Log analysis

Endpoint investigation

Dutch-English bilingual

Tools

Forensic tooling

Job description

# Cyber defense specialist incident response*Enexis***Weert, Limburg**Hybrid · Senior · Full-time### The RoleThe specialist leads end-to-end incident response across the full lifecycle — from preparation and detection through containment, recovery and lessons learned. Day to day, this means conducting digital forensic investigations, analysing malware, reconstructing attacker behaviour, and translating findings into improved playbooks, detection logic and automated SOC processes. Participation in a 24/7 on-call rota is required.### Skills & ExperienceCandidates need substantial experience in DFIR, incident response or a comparable cybersecurity role, with demonstrable knowledge of attack techniques, threat actor TTPs, ransomware and malware. Hands-on experience with forensic tooling, log analysis and endpoint investigation is essential. Comfort operating in both Dutch and English is expected in this bilingual team environment.### Who It SuitsThis role suits an experienced IR or DFIR professional who combines technical depth with clear communication skills for management and executive stakeholders. Someone who thrives under pressure, enjoys continuous improvement, and wants to shape a next-generation tier-less SOC within critical national infrastructure will find this particularly rewarding.Typical advertised salary forIncident Response roles in Netherlands:**€66,000–€84,000**(median €78,000 — from19 recent listings analysed by Forensic Focus).Compare Incident Response salaries in Netherlands →Learn More/Apply