Incident Response Specialist
Il y a 3 jours
Mons, Wallonia, Belgique
WLG
Temps plein
Gratuit avec email ou Google
Enregistrez cette offre et organisez votre recherche
Créez un compte gratuit pour enregistrer des offres d'emploi, créer des alertes et revenir à cette liste depuis votre tableau de bord.
Gratuit avec email ou Google
When something gets in, somebody has to be the one who stays calm and worksthe problem. That is this job.
You would join the incident response team of a multinational defence organisation in Mons,Belgium, under the section head — responding to security incidents around the clock, and helpingthe wider alliance and its partners do the same.
What you would be doing
Running incident response — triage, containment, eradication, recovery — in normal hours andon occasional call-out
Giving technical coordination and support to operating authorities across member and partnernations, non-governmental organisations and industry partners
Leading or supporting response teams sent out to extend that coverage to one or severalphysical locations, including on operations and missions
Building and maintaining the taxonomy behind the branch's information, and the content of theportals that sit on it
Designing and distributing the reports, briefings and dashboards that business owners, theoperational community, service management and security people each need
Keeping a live network of security peers, so an urgent action can be coordinated when it isneeded rather than when it is convenient
Finding and implementing improvements to the response process as the threats move
Writing the standard operating procedures and instructions that cover it all
Acting as the response expert in meetings across the organisation and in an incident taskforce
What you would bring
At least four years of hands-on incident response, or a directly adjacent field — digitalforensics, threat hunting, or malware and network analysis
A thorough grasp of computer and communications security, networking, and where modernoperating systems and applications actually break
Recent hands-on intrusion detection and response inside an enterprise-scale response team,ideally against the MITRE ATT&CK framework
At least three years in information and knowledge management, preferably in security
Working alongside IT service management
Very good communication and analysis, and professional English
Vulnerability assessment and scoring — CVSS, SSVC, coordinated disclosure
A relevant certification such as CISM, CISSP or a GIAC security qualification
A bachelor's degree in a related discipline with three years of related experience — or,exceptionally, ten years of progressive expertise in this kind of work
Nice to have
A degree in cyber or IT security, or information management
Practical work or research on using AI and language models in defensive security
Vulnerability management end to end: ingestion, scoring, prioritisation, impact
An IT service management certification, and depth on security event sources and how to readthem
Hands-on system and network administration, including TCP/IP engineering
Time in a large organisational response team, and contribution to recognised communities suchas FIRST
Why this one is worth a look
Very few response teams operate at this scale or with this reach, and the work is genuinelyoperational rather than advisory.