Cybersecurity Incident Response Officer – Sentinel

pOur client, a prominent organization in the transport and infrastructure sector, is seeking a Cybersecurity Incident Response Officer to join their cybersecurity team. This role focuses on the end-to-end incident lifecycle, proactive threat hunting, and the optimization of advanced security monitoring systems. /p ul liInvestigate and respond to level 3 and 4 security incidents, including network intrusions, malware infections, and data breaches. /li liConduct digital forensic investigations and analyze security artifacts across IT, IoT, and OT environments. /li liPerform proactive threat hunting using SIEM and custom tools to identify anomalous behaviors and indicators of compromise. /li liDevelop and optimize detection rules and use cases based on the bMITRE ATTCK /b framework. /li liAutomate security event responses and develop playbooks to streamline operations within the SOC and CSIRT. /li liCoordinate with internal stakeholders and external security providers to communicate incident progress and mitigate risks. /li /ul ul liYou have 4+ years of experience in a security-focused role with a core specialization in incident response and analysis. /li liYou possess deep expertise in security monitoring using bSentinel SIEM /b, bEDR /b, and bMicrosoft Defender /b. /li liYou bring hands-on experience with digital forensics, malware analysis, and artifact analysis for bWindows /b and bLinux /b systems. /li liYou're experienced in bSOC Engineering /b, including use case development and the automation of alert handling. /li liYou possess working knowledge of the bMITRE ATTCK /b framework and bServiceNow SIR /b modules. /li liYou have experience in the organization and animation of security tabletop exercises. /li liYou have obtained relevant certifications such as bGCIH /b, bGCFE /b, bGCFA /b, bGNFA /b, bGCIA /b, or bGREM /b. /li liYou have strong analytical and problem-solving skills with the ability to identify suspicious activities on complex networks. /li liYou have a Bachelor's degree in Computer Science, Information Security, or equivalent professional experience. /li liYou are fluent in bEnglish /b (C1) with working knowledge of bDutch /b or bFrench /b. /li /ul ul libStart date: /b 01/01/2027 /li libDuration: /b Until 31/12/2027 /li libWork regime: /b Full-time /li libLocation: /b Brussels /li libWorking model: /b Hybrid (onsite presence required up to 5 days per week) /li libContract: /b open to both permanent employees and freelancers /li /ul