Job Description
Main responsibilities
Operational security & SOC
• Monitoring and steering of the SOC (external provider or in-house)
o Security alert analysis
o Incident triage / prioritization
o Follow-up of corrective actions
• Active participation in security incident management
o Investigation (SIEM, logs, endpoints, networks)
o Root cause analysis (RCA)
o Contribution to post-incident reviews (lessons learned)
• Contribute to the continuous improvement of detection rules and SOC processes
Penetration testing & vulnerability management
• Follow-up of external penetration tests (and internal tests if skilled)
o Scoping the tests (scope, objectives)
o Report analysis
o Vulnerability assessment
• Coordinate remediation plans with IT teams
• Participate in <...