Senior cyber defense specialist Incident response

This is how you will take on the challenge

A cyber incident never stands alone. That is why you lead the complete incident response process: from preparation and identification to containment, eradication, recovery and lessons learned. During major incidents, you support the crisis team and ensure that technical insights are translated into clear advice and concrete actions.

You also dive into the technical details yourself. You conduct digital forensic investigations, analyse malware and reconstruct attacker behaviour. This enables you to determine the cause, impact and scope of an incident. You translate the lessons learned into improved playbooks, processes, monitoring, detection and automation.In addition, you participate in SOC activities and help develop our tier-less way of working. The goal is clear: more automation, continuous improvement and a minimum of manual effort.

Your responsibilities

• Lead and coordinate the response to cyber incidents, from preparation and identification through containment, eradication, recovery and lessons learned.
• Support the crisis team during major cyber incidents.
• Conduct digital forensic investigations, malware analysis and endpoint investigations.
• Reconstruct attacker behaviour and determine the cause, impact and scope of incidents.
• Develop and maintain incident response playbooks and processes.
• Advise on monitoring, detection and response capabilities and contribute to the further development of the SOC.
• Work closely with SOC, Threat Hunting and CASM.
• Act as a subject-matter expert for management and other stakeholders.
• Contribute to tabletop exercises, cyber crisis training and the further development of Incident Response within the SOC.
• Identify relevant trends and threats that may affect Enexis’ cyber resilience.