Dieses Stellenangebot ist nicht mehr verfügbar
Technical Team Lead - CSIRT (Cyber Security Incident Response Team):
ITProposal
- Mobile, Alabama, United States
- Mobile, Alabama, United States
Über
Key Responsibilities
Lead and manage the CSIRT team, including planning, prioritization, and capability development.
Design, implement, and maintain CSIRT infrastructure, including SIEM, SOAR, and Cyber Threat Intelligence (CTI) platforms.
Develop and automate security processes using Python and other scripting languages.
Implement and manage open-source security tools and monitoring solutions.
Coordinate incident response activities, including triage, forensic investigations, root cause analysis, and remediation.
Design and implement security monitoring controls to protect critical systems.
Analyze security logs, investigate incidents, and prepare technical reports.
Monitor vulnerabilities, assess their impact, and support remediation efforts.
Track and analyze cyber threat intelligence feeds and emerging threats.
Maintain technical documentation, procedures, and operational playbooks.
Define and report on CSIRT performance metrics, KPIs, and service effectiveness.
Support escalations, change activities, and collaboration with internal stakeholders.
Required Qualifications
Minimum 7 years of experience in a similar cyber security leadership or incident response role.
Strong expertise in Security Operations, Incident Response, Digital Forensics, Malware Analysis, Vulnerability Management, and Blue Team operations.
Extensive experience with SIEM technologies, particularly Splunk Enterprise Security.
Experience securing mobile applications on iOS and Android platforms.
Strong understanding of encryption, compliance, and security governance in highly regulated environments.
Proficiency in Enterprise Linux and scripting languages such as Python and PowerShell.
Experience analyzing emerging vulnerabilities and assessing organizational risk.
Strong analytical, troubleshooting, and problem-solving skills.
Excellent communication skills with the ability to engage stakeholders at all levels.
Commitment to continuous learning and staying current with cyber security trends.
Preferred Qualifications
Certifications such as OSCP, GCIH, GCIA, GNFA, CISSP, or CISM.
Knowledge of security frameworks and best practices, including MITRE ATT&CK and NIST.
Experience with ITIL processes and change management.
Languages
Fluent English (written and spoken).
Good working knowledge of Dutch and/or French.
Additional Requirements
Belgian nationality is mandatory.
Valid National, NATO, and EU security clearance at SECRET level or higher is required.
Ability and willingness to work 100% on-site in Brussels.
Personal Attributes
Strong analytical and problem-solving mindset.
Hands-on and practical approach to security operations.
Excellent leadership and teamwork skills.
Detail-oriented with strong documentation and configuration management practices.
#J-18808-Ljbffr
Sprachkenntnisse
- English
Hinweis für Nutzer
Dieses Stellenangebot wurde von einem unserer Partner veröffentlicht. Sie können das Originalangebot einsehen hier.