Senior cyber defense specialist Incident response

Enexis; Weert; Hybrid; EUR 64,000 - 91,000; Full time

Benefits offered by this job

Hybrid work model

SANS courses available

Professional certifications support

Pension scheme

Laptop/Smartphone provided

Job summary

Enexis is seeking an experienced Incident Response Specialist to lead the full IR lifecycle, from preparation to lessons learned, and to support the crisis team during major cyber events. You will translate technical insights into actionable guidance and enhance playbooks, processes, and SOC capabilities.

You will perform digital forensics, malware analysis and endpoint investigations, reconstruct attacker behaviour, and drive improvements in monitoring, detection and automation across the

Qualifications

• Requires HBO or university-level thinking and working capacity.
• Extensive experience in Incident Response, DFIR, SOC, or similar cybersecurity roles.
• Experience investigating and handling complex cyber incidents and knowledge of attack techniques.

Responsibilities

• Lead and coordinate the response to cyber incidents from preparation to lessons learned.
• Support the crisis team during major cyber incidents.
• Conduct digital forensic investigations, malware analysis and endpoint investigations.
• Reconstruct attacker behaviour and determine cause, impact and scope of incidents.
• Develop and maintain incident response playbooks and processes.
• Advise on monitoring, detection and response capabilities and contribute to SOC development.
• Collaborate with SOC, Threat Hunting and CASM.
• Act as a subject-matter expert for management and stakeholders.
• Contribute to tabletop exercises and cyber crisis training.
• Identify trends and threats affecting Enexis' cyber resilience.

Skills

Incident Response

DFIR

SOC

Analytical skills

Technical curiosity

Decision making

Communication

Education

HBO or university degree

Tools

Forensic tools

Log analysis tools

Endpoint investigation tools

Job description

What are you going to do?

This Is How You Will Take On The Challenge

A cyber incident never stands alone. That is why you lead the complete incident response process: from preparation and identification to containment, eradication, recovery and lessons learned. During major incidents, you support the crisis team and ensure that technical insights are translated into clear advice and concrete actions.

You also dive into the technical details yourself. You conduct digital forensic investigations, analyse malware and reconstruct attacker behaviour. This enables you to determine the cause, impact and scope of an incident. You translate the lessons learned into improved playbooks, processes, monitoring, detection and automation.In addition, you participate in SOC activities and help develop our tier-less way of working. The goal is clear: more automation, continuous improvement and a minimum of manual effort.

Your responsibilities

• Lead and coordinate the response to cyber incidents, from preparation and identification through containment, eradication, recovery and lessons learned.
• Support the crisis team during major cyber incidents.
• Conduct digital forensic investigations, malware analysis and endpoint investigations.
• Reconstruct attacker behaviour and determine the cause, impact and scope of incidents.
• Develop and maintain incident response playbooks and processes.
• Advise on monitoring, detection and response capabilities and contribute to the further development of the SOC.
• Work closely with SOC, Threat Hunting and CASM.
• Act as a subject-matter expert for management and other stakeholders.
• Contribute to tabletop exercises, cyber crisis training and the further development of Incident Response within the SOC.
• Identify relevant trends and threats that may affect Enexis' cyber resilience.

Job requirements

You put your shoulders to the wheel with

You remain calm under pressure and quickly reduce complex situations to their essence. You combine strong analytical skills with technical curiosity and are comfortable making decisions when not all information is available. At the same time, you can explain technical topics clearly to colleagues, management and executive stakeholders. You enjoy working together, sharing knowledge and using every incident as an opportunity to become structurally stronger.

• HBO or university-level working and thinking capacity.
• Extensive experience in Incident Response, DFIR, a SOC or a comparable cybersecurity role, including experience investigating and handling complex cyber incidents.
• Demonstrable knowledge of attack techniques, malware, ransomware and threat actor TTPs, combined with experience using forensic tools, analysing logs and investigating endpoints.

You are willing to participate in a 24/7 on-call or standby service.

Team & culture

With your energy, it is possible

• You help protect the energy system of the future from cyberattacks and strengthen Enexis' digital resilience.
• You contribute to the development of a next-generation, technology-driven and tier-less Security Operations Center (SOC).
• You can count on excellent employment conditions, opportunities for professional growth and the possibility to attend SANS courses and obtain relevant certifications.

What do you get from us?

And we also invest energy in you

• Salary in grade 17 between €5,704 and €8,149 gross per month, based on 40 hours per week.
• In addition to your salary, you receive 28.7% flexible employment benefits: 8% holiday allowance, 10.7% end-of-year bonus and 10% personal budget. You can have these benefits paid out at any time or use them to purchase additional leave.
• A 70% contribution to your ABP Keuzepensioen pension scheme.
• 24.5 days of annual leave based on a full-time employment contract. Need more time to recharge? You can purchase up to 35.5 additional days of leave using your personal budget and end-of-year bonus.
• An HP laptop or MacBook and a smartphone, which you may also use privately.
• Travel expense reimbursement and a first-class public transport subscription for business use.
• A vitality budget of €700 for, for example, a sports subscription, a hobby or making your home more sustainable.
• Opportunities to grow through our internal development platform and external courses and training.
• The opportunity to attend SANS courses and obtain relevant certifications.
• A hybrid working environment in Weert, Den Bosch and from home.
• Participation in a 24/7 on-call or standby service.

Work as an incident response specialist on the energy network of tomorrow

Good to know

• Screening is part of the application process. This may include an assessment, reference checks and a Certificate of Good Conduct (VOG). You will receive more information about this during the procedure.