SIRT Team Lead – Security Incident Response Team

ASML Germany GmbH; Veldhoven; On-site; EUR 90,000 - 130,000; Full time

Job summary

ASML Germany GmbH is seeking a Security Incident Response Team Lead to head the SIRT within the SOC. You will guide security analysts, drive detection, response and continuous improvement across IT, OT, and physical domains.

You will mentor staff, shape the security posture, coordinate staffing, and work with leadership to implement process improvements. The role may require shift work and on-call duties to ensure 24/7 coverage.

Qualifications

• Strong team development & coaching focus.
• Strong stakeholder management and build solid relationships of trust at different levels.
• 8+ years of management experience, preferably in a multinational corporate security environment.
• Proven experience with security monitoring & incident response activities.
• Broad experience in multiple security domains (IT, Information, OT or Physical Security).
• Master’s degree working and thinking level.
• CISM, CISSP, or SANS GSOC/GSOM certificate is a must.

Responsibilities

• Lead a team of security analysts within the SIRT and oversee daily operations.
• Provide process and technical guidance to team members and coordinate with Service Delivery Management for capacity planning.
• Mentor security analysts and shape ASML's security posture across the organization.
• Ensure high-quality analysis, documentation and resolution of security incidents in line with the incident management workflow.

Skills

Security Monitoring

Leadership & Mentorship

Cultural transformation

Education

Master’s degree

Job description

Introduction to the Job

As Security incident response team lead, you will take a leadership role within the Security Incident Response Team (SIRT). Your primary focus will be on leading a team of security analysts and play a key role in shaping ASML’s security posture.

Role and Responsibilities

The Security Incident Response Team (SIRT) operates within the Security Operations Center (SOC) to detect and mitigate security threats in real time. As a SIRT Team Lead, you will be responsible for people management, operational security monitoring and security improvements.

You will manage team(s) performance during daily operations and provide process and technical guidance to team members across the board. You coordinate staffing and resource allocation of team members across end-to-end SIRT operations and collaborate with Service Delivery Management for specialist track capacity management and empower end- to-end process execution.

The team of security analysts consists of diverse areas of expertise security incident response (Cyber, IT, OT, DLP, Physical), threat hunting, and driving strategic security improvements. You will play a key role in mentoring security analysts and shaping the organization’s security posture.The main focus points of the role of SIRT team lead:

• Develop & grow your team members to support wider ranges of security incidents and become more valuable and well-rounded security analysts.

• Identify and implement process level improvements in the team and strengthen the collaboration across ASML together with the rest of the leadership team.

• Ensure high quality analysis, documentation and resolution on all security incidents managed in your team aligned with a common documentation way of working across the ASML Security incident management workflow.

Education and experience

This position requires deep tactical, people management expertise, with a balanced technical knowledge, strong analytical skills, and the ability to understand complex security investigations and lead security improvements.The ideal candidate will have:

• Strong team development & coaching focus.

• Strong stakeholder management and build solid relationships of trust at different levels.

• 8+ years of management experience, preferably in a multinational corporate security environment.

• Proven experience with security monitoring & incident response activities.

• Broad experience in multiple security domains (e.g., IT, Information, Operational Technology (OT) or Physical Security.

• Master’s degree working and thinking level.

• CISM, CISSP, or SANS GSOC/GSOM certificate is a must.

Skills

• Expertise in Security Monitoring, Analysis, Containment and Remediation.

• Strong Leadership & Mentorship Capabilities.

• Expertise leading Cultural and Agile transformation.

Other Information

A Certificate of Good Conduct “Verklaring Omtrent het Gedrag (VOG)” is required for this position.

• The role may involve shift work or on-call duties to provide 24/7 security coverage.

• This position is primarily office-based, with the possibility of remote work.

• It is preferred if you possess a valid work permit for the Netherlands.

This position requires access to controlled technology, as defined in the United States Export Administration Regulations (15 C.F.R. § 730, et seq.). Qualified candidates must be legally authorized to access such controlled technology prior to beginning work. Business demands may require ASML to proceed with candidates who are immediately eligible to access controlled technology.

Inclusion and diversity

ASML is an Equal Opportunity Employer that values and respects the importance of a diverse and inclusive workforce. It is the policy of the company to recruit, hire, train and promote persons in all job titles without regard to race, color, religion, sex, age, national origin, veteran status, disability, sexual orientation, or gender identity. We recognize that inclusion and diversity is a driving force in the success of our company.

Need to know more about applying for a job at ASML? Read our frequently asked questions.