Cyber Security Incident Response Team

Il y a 4 mois

Bruxelles Anderlecht, Belgique Ypto NV Temps plein

As a CSIRT Officer you will join the CISO Cybersecurity Center of Excellence team within the NMBS CISO organization. You will contribute to the daily **security incident preparation, detection and response activities including threat** detection, incident handling, threat hunting as well as propose and execute improvement actions, interact with the staff of NMBS (including its affiliates) and the security services providers.

Incident handling and response

As member of a dynamic CSIRT team you will need to be able to respond adequately to cyber security incidents by working together with fellow CSIRT officers and any possible stakeholders.

This includes:

- Investigate and respond to level 3/4security incidents, including malware infections, network intrusions, and data breaches
- Conduct forensic investigations, coordination and analysis of security incidents, regardless of IT, IoT or OT origin
- Work closely with other members of the SOC, CSIRT and with other teams within the organization, to identify and mitigate security risks
- Develop and implement incident response plans & procedures, and provide guidance to other members of the organization on security best practices
- Communicate and report security incident progress to required internal and external stakeholders

Threat detection and hunting

As the CSIRT officer, you will also be responsible for threat detection and hunting. You will use your expertise in security operations to proactively identify threats and vulnerabilities within the organization's infrastructure with the help of the SIEM and custom detection tools. This will involve conducting regular threat hunting exercises to detect potential threats that may have evaded detection by traditional security measures. You will use a variety of tools and techniques to collect and analyze security data to identify anomalous behavior and potential indicators of compromise. Additionally, you will work closely with the the 3rd party SOC team to investigate potential security incidents and provide guidance on threat remediation and mitigation strategies. You are able to read and understand logs (Windows, Linux, network, etc) to analyze system artifacts for signs of compromise.

SIEM Engineering

You will play a critical role to ensure the organization's security posture remains strong. You will develop, maintain, and optimize our SIEM systems to ensure timely detection and response to security incidents. This will involve creating and maintaining use cases and detection rules (based on the MITRE ATT&CK framework), as well as writing playbooks for the SOC team to ensure consistent and effective incident response. Additionally you will automate the response to SIEM and EDR events as much as possible, in order to allow the SOC and the CSIRT to focus on the essentials.

Projects

Next to the core business of our team activities mentioned above, you will also contribute in different projects based on the needs of our team. This can include rolling out a new products or platforms, maintaining it, automate manual tasks with the help of scripts,

**Skills**:

- Strong analytical and problem-solving skills, with the ability to identify and respond to security incidents in a timely and effective manner
- Strong knowledge of security technologies and tools, such as SIEM, EDR, intrusion detection and prevention, firewalls,
- Strong understanding of networking protocols and technologies, as well as operating systems
- Experience with security incident response tools and techniques, including forensics and/or malware analysis
- Experience with threat hunting and the ability to identify and investigate suspicious activities on the network and systems
- Experience with SOC Engineering and identifying gaps in our detection capabilities, as well as the ability to automate alert handling
- Experience with one or more scripting languages: Python, Bash, PowerShell
- Experience with query languages (Kusto Query Language, SPL, etc)
- Experience with the administration of Linux systems
- Familiar with cloud security concepts
- Passionate about security monitoring, digital forensics, incident response, threat intelligence
- Spoken and written fluency in Dutch or French
- Spoken and written fluency in English
- Customer focus and able to handle in an organization-sensitive way

Qualifications:

- Bachelor's degree in Computer Science, Information Security, related field or equivalent experience
- At least 3-5 years of experience in a security-related role, with a focus on incident response and analysis
- Relevant certifications, such as the GCIH, GCFE, GCFA, GNFA, GCIA, GREM or similar are a plus

**Our offer**

Within our open corporate culture, you contribute to the digital transformation of SNCB. You will have a job with social impact and ample opportunity to make your own contribution. In addition to a good work-life balance and a competitive salary, you will receive the following benefits:

- the possibility to work r

  • Incident Manager

    il y a 13 heures

    Bruxelles Etterbeek, Belgique NVISO Temps plein

    Already experienced in the world of cyber security? New to it all, but genuinely interested? Well, at NVISO we might be looking for you and we’d love to have a chat! **WHO ARE WE?**: It all starts with the mission: NVISO is here to protect European society from potentially devastating cyber attacks! This means we offer cyber security services to private...

  • Ot Cyber Security Operator/technician, Pan Eu

    Il y a 7 mois

    Anderlecht, Belgique Coca-Cola Europacific Partners Temps plein

    This is a fantastic opportunity to join a new and growing team in CCEP and make a difference. In this role you will: - Safeguard Operational Technology (OT) assets by implementing and supporting Cyber related systems and processes, as per the Global OT Cyber Strategy - Ensure OT Cyber Incidents are handled effectively, and within a defined timeframe, as per...

  • Cyber Defense Coordinator

    Il y a 3 mois

    Bruxelles Anderlecht, Belgique Ypto NV Temps plein

    As a Cyber Defense Coordinator, you will be responsible for conducting detailed audits of our ransomware defenses, identifying potential entry points, and ensuring robust monitoring systems and backup procedures are in place. You will play a key role in developing, updating, and testing our ransomware incident response plan to minimize risks and enhance our...

  • Domain Lead Csirt

    il y a 2 semaines

    Bruxelles Anderlecht, Belgique Ypto NV Temps plein

    As the CISRT Domain Lead, you leverage your experience to safeguarding the organizations digital assets by leading the response to cybersecurity incidents and ensuring that the team operates efficiently and effectively. - As a mentor, play a pivotal role in guiding, supporting, and transferring your knowledge and experience to the CSIRT Team in their...

  • Security operations analyst

    il y a 1 mois

    Bruxelles, Belgique Luminus Temps plein

    In today's landscape of escalating digital complexity and cybersecurity threats, a Security Operations Analyst plays a crucial role in safeguarding Luminus assets. The Security Operations Analyst is responsible for cyber incident response and the operations, monitoring and administration of a variety of cybersecurity solutions and processes to protect...

  • Security Operations Analyst

    il y a 1 mois

    Bruxelles, Belgique Luminus Temps plein

    In today's landscape of escalating digital complexity and cybersecurity threats, a Security Operations Analyst plays a crucial role in safeguarding Luminus assets. The Security Operations Analyst is responsible for cyber incident response and the operations, monitoring and administration of a variety of cybersecurity solutions and processes to protect...

  • Service Delivery

    il y a 13 heures

    Bruxelles Etterbeek, Belgique NVISO Temps plein

    Are you already experienced in the world of security and would you like to further increase your responsibilities and grow your career? At NVISO you have the opportunity and we look forward to getting to know you! As the Manager of the Service Delivery Management team, you will be responsible for overseeing the delivery of Managed Detection and Response...

  • Security Analyst

    il y a 3 semaines

    Bruxelles, Belgique Compusearch Temps plein

    Employer details Our client is a systems and network provider in Belgium. They offer highly advanced Network, System and Internet services to their clients. They use the most innovative and advanced technologies for continuity in the improvement of their network. They are looking for an experienced Security Analyst to support its internal Security...

  • Enterprise Data Security Architect

    Il y a 7 mois

    Anderlecht, Belgique UCB Temps plein

    **Make your mark for patients** To strengthen our **Information Technology** team, based at the HQ, in Brussels, Belgium we are looking for a talented individual to fill the position of**:Enterprise** **Data Security Architect.** The global role of Data Security Architect is a Senior role within the department of IT Security, Risk management, Data Privacy...

  • Teamlead Cyber Coe

    Il y a 7 mois

    Bruxelles Anderlecht, Belgique Ypto NV Temps plein

    **People management** - Ensure clear governance, including roles and responsibilities, accountability and delegation of tasks within their team. - Coach and steers the team where necessary and guides individual team members in their personal development together with the CISO and the HR business partner. - Recruit and hire new team members with the right...

  • Network Engineer, Cyber Security Engineer

    il y a 4 semaines

    Bruxelles, Belgique Smals Temps plein

    Als Network & Cybersecurity engineer combineer je netwerkbeheer met het verzekeren van een veilige digitale omgeving voor zowel medewerkers als klanten en partners. Je staat in voor het opzetten van de netwerkconfiguratie en het ontwikkelen van een architectuur die het best aansluit bij de behoeften van de organisatie en de gebruikers. Concreet ben je...

  • Enterprise Security Architect

    Il y a 7 mois

    Anderlecht, Belgique UCB Temps plein

    **Make your mark for patients** To strengthen our **Information Technology** team, based at the HQ, in Brussels, Belgium we are looking for a talented individual to fill the position of**:IT Security, Risk management, Data Privacy and Compliance.** The global role of Enterprise Security Architect is a Senior role within the department of IT Security, Risk...

  • Technology Security Expert

    il y a 2 semaines

    Bruxelles, Belgique Compusearch Temps plein

    They offer highly advanced Network, System and Internet services to their clients. They use the most innovative and advanced technologies for continuity in the improvement of their network. They are looking for an experienced Security Analyst to support its internal Security Department. The ideal candidate will have relevant expertise and be ready to...

  • Compusearch - Security Analyst

    il y a 2 semaines

    Bruxelles, Belgique Compusearch Temps plein

    Employer details Our client is a systems and network provider in Belgium. They offer highly advanced Network, System and Internet services to their clients. They use the most innovative and advanced technologies for continuity in the improvement of their network. They are looking for an experienced Security Analyst to support its internal Security...

  • Senior Cyber Security Engineer

    il y a 3 semaines

    Bruxelles, Belgique Smals Temps plein

    Uw rolJe bent een informaticus met een passie voor security, gespecialiseerd in het beveiligen van netwerken en datasystemen, zowel in de cloud als on-premises. Je vervult een sleutelrol in zowel proactieve als reactieve beveiligingsmaatregelen en fungeert als zowel controleur als adviseur op het gebied van cyberveiligheid.Je bent verantwoordelijk voor het...

  • Senior Cyber Security Engineer

    il y a 3 semaines

    Bruxelles, Belgique Smals Temps plein

    Uw rol Je bent een informaticus met een passie voor security, gespecialiseerd in het beveiligen van netwerken en datasystemen, zowel in de cloud als on-premises. Je vervult een sleutelrol in zowel proactieve als reactieve beveiligingsmaatregelen en fungeert als zowel controleur als adviseur op het gebied van cyberveiligheid. Je bent verantwoordelijk voor...

  • Junior Cyber Security Specialist

    il y a 2 semaines

    Bruxelles Anderlecht, Belgique Ypto NV Temps plein

    **Join Ypto and Protect the Future of Sustainable Mobility** At Ypto, the IT backbone of NMBS/SNCB, we're dedicated to securing a digital future for the railway industry. We're seeking talented individuals to join our dynamic Cybersecurity team and contribute to critical security initiatives. **Your Role**: - ** Security Enhancement**: Work on projects...

  • Process & Incident Officer

    il y a 13 heures

    Bruxelles Etterbeek, Belgique Degroof Petercam Temps plein

    **Context**: Quality of service is key for Degroof Petercam! Incidents or complaints need to be handled with care, are reported instantly, and need to be addressed as quickly and adequate as possible. To avoid incidents and complaints, assess our procedures, policies, and processes continuously. Within the team that is responsible for the Risk & Control of...

  • Smals - Senior Cyber Security Engineer

    il y a 3 semaines

    Bruxelles, Belgique Smals Temps plein

    Je bent een informaticus met een passie voor security, gespecialiseerd in het beveiligen van netwerken en datasystemen, zowel in de cloud als on-premises. Je vervult een sleutelrol in zowel proactieve als reactieve beveiligingsmaatregelen en fungeert als zowel controleur als adviseur op het gebied van cyberveiligheid.Je bent verantwoordelijk voor het...

  • Senior Cyber Security Engineer

    il y a 3 semaines

    Bruxelles, Belgique Smals Temps plein

    Uw rol Je bent een informaticus met een passie voor security, gespecialiseerd in het beveiligen van netwerken en datasystemen, zowel in de cloud als on-premises. Je vervult een sleutelrol in zowel proactieve als reactieve beveiligingsmaatregelen en fungeert als zowel controleur als adviseur op het gebied van cyberveiligheid. Je bent verantwoordelijk voor...