Senior CSIRT AnalystSenior CSIRT Analyst

About the job

For the assignment of our client, a leading organisation in the field of cybersecurity, we are looking for a Co-Lead CSIRT.

More than just a purely technical expert, you will become the preferred partner of the SOC/CSIRT manager. In this tandem, you take responsibility for operational excellence: while the manager ensures the overall vision and governance, you steer the technical response and ensure the further development of the team in operational deployment.

Co-Leadership & Team Management

• Leadership duo: Supporting the manager in the daily operation of the CSIRT (activity monitoring, resource allocation)
• Technical leadership: Supervising analysts during operations, ensuring consistent methods and high-quality results
• Mentoring: Passing on your know-how to develop junior and intermediate profiles

DFIR Investigations & Crisis Management

• Lead investigator: Leading forensic investigations in critical incidents (state compromises, ransomware, complex fraud cases)
• Strategic containment: Defining and enforcing immediate containment measures for clients
• Crisis communication: Translating technical matters into strategic decision-making bases for C-level management

Further Development of the Practice

• Continuous improvement: Optimising investigation tools, response playbooks, and process automation
• Cross-departmental projects: Contributing to the further development of services (threat hunting, attack simulations, advanced detection)
• Sales support: Bringing your technical credibility to key client presentations