Cyber Incident Responder & Forensics Specialist

baobabinsurancegmbh; Rotterdam; Hybrid; EUR 55,000 - 90,000; Full time

Benefits offered by this job

Flexible work options

28 vacation days

Competitive compensation

Continuous learning

Challenging & supportive culture

Job summary

Baobab Risk Solutions in Rotterdam is seeking a security incident responder to execute containment and forensic investigations of ransomware and other cyber incidents. You will work with client IT teams and MSPs across Windows, AD, M365, virtualization, and backups, documenting progress and escalating risks as needed.

With 2+ years in IT security or incident response, you will leverage SIEM/EDR and forensic tools, and apply AI tools to improve investigations and automation while upholding data

Qualifications

• 2+ years hands-on experience in IT support, systems administration, recovery or incident response.
• Proficiency with SIEM/EDR and forensic tools.
• Practical experience documenting technical work in tickets or recovery notes.
• Ability to use AI tools for technical tasks such as log analysis or information extraction.
• Dutch and English for client discussions and coordination with partners.

Responsibilities

• Execute containment and forensic investigation of ransomware, BEC and other incidents, preserving evidence and developing findings with guidance.
• Support systems restoration after incidents: assess backups, rebuild servers and endpoints, validate services before go‑live.
• Collaborate with client IT teams and MSPs across Windows, AD, M365, virtualization and backup environments.
• Document technical work and communicate progress, risks and blockers to the lead.
• Apply cutting-edge AI tools in investigations, recovery and automation, test new approaches and share results while protecting incident data.
• Improve recovery checklists, scripts and playbooks by sharing lessons from casework.

Skills

Incident response

IT security

Security tooling

Documentation

AI in security

Tools

SIEM

EDR

Forensics

Windows Defender

CrowdStrike

Job description

Baobab Risk Solutions in Rotterdam is seeking a security incident responder to execute containment and forensic investigations of ransomware and other cyber incidents. You will work with client IT teams and MSPs across Windows, AD, M365, virtualization, and backups, documenting progress and escalating risks as needed.

With 2+ years in IT security or incident response, you will leverage SIEM/EDR and forensic tools, and apply AI tools to improve investigations and automation while upholding data