Cyber Incident Responder — AI-Driven, Flexible Hybrid

Baobab Insurance GmbH; Rotterdam; Hybrid; EUR 60,000 - 90,000; Full time

Benefits offered by this job

Flexible work from home

Office in Rotterdam

Udemy Business access

Vacation days

Competitive compensation

Job summary

Baobab Risk Solutions is seeking a security specialist to execute containment and forensic investigations, restore systems after incidents, and collaborate with client IT teams across Windows, AD, Microsoft 365, and backups. You’ll apply AI tools to investigations, document progress clearly, and continually improve playbooks.

The role offers flexible hybrid work with two days remote from home and two days in our Rotterdam office, with growth opportunities and competitive compensation.

Qualifications

• Proficient in Dutch and English for client discussions and coordination.
• 2+ years hands-on IT support, systems administration, recovery or incident response.
• Experience with SIEM, EDR and forensic tools.
• Experience documenting technical work in tickets or recovery notes.
• Experience using AI tools for technical tasks.
• Willingness to be coached and develop security skills.

Responsibilities

• Execute containment and forensic investigation of ransomware, business email compromise and other incidents.
• Support systems restoration after cyber incidents: assess backups, rebuild servers and endpoints.
• Work with client IT teams and MSPs across Windows, Active Directory, Microsoft 365, virtualization and backup.
• Document technical work and communicate progress, uncertainties and blockers.
• Put cutting-edge AI tools to work in investigations, recovery and automation.
• Improve recovery checklists, scripts and playbooks by sharing lessons from casework.

Skills

Dutch & English fluency

Incident response

SIEM/EDR tools

AI tools usage

Technical documentation

Open to coaching

Tools

Splunk

CrowdStrike

Velociraptor

X-Ways

KAPE

Hayabusa

SOF-ELK

OpenRelik

Windows Defender for Business

Job description

Baobab Risk Solutions is seeking a security specialist to execute containment and forensic investigations, restore systems after incidents, and collaborate with client IT teams across Windows, AD, Microsoft 365, and backups. You’ll apply AI tools to investigations, document progress clearly, and continually improve playbooks.

The role offers flexible hybrid work with two days remote from home and two days in our Rotterdam office, with growth opportunities and competitive compensation.