Cybersecurity Incident Response Analyst
Step into a CSIRT mission where every alert can become a story of detection, containment, and recovery. You will bring at least four years of incident response experience to a 12-month engagement in Brussels starting January 2027.
CONTEXT
Our client, a major player in its sector, is preparing a 12-month cybersecurity incident response mission set to start in January 2027. The organization needs an experienced CSIRT officer who can operate calmly when signals become incidents, coordinate technical responders, and protect critical operations under pressure. The role is based in Brussels and calls for someone with at least four years of hands-on incident response and analysis experience.
ACTIVITIES
- Detect, triage, and analyze security incidents across operational systems.
- Coordinate containment, eradication, and recovery actions with technical teams.
- Document incidents, timelines, evidence, and lessons learned.
- Contribute to incident response playbooks, runbooks, and escalation procedures.
- Communicate clearly with stakeholders during active and post-incident phases.
- Improve detection and response maturity through post-incident recommendations.
EXPECTED ACHIEVEMENTS
- Reduce incident impact through fast and structured response.
- Improve CSIRT readiness, documentation, and coordination practices.
- Deliver clear post-incident analysis and actionable remediation recommendations.
- Strengthen the organization's resilience during a critical 12-month mission.
ENVIRONMENT
- CSIRT operations, incident response, and threat analysis.
- SIEM, EDR, SOAR, and forensic investigation practices.
- Incident playbooks, escalation matrices, and post-incident reviews.
- Security operations collaboration in a high-stakes environment.