Job Description
Main responsibilities
Operational security & SOC
- Monitoring and steering of the SOC (external provider or in-house)
o Security alert analysis
o Incident triage / prioritization
o Follow-up of corrective actions
- Active participation in security incident management
o Investigation (SIEM, logs, endpoints, networks)
o Root cause analysis (RCA)
o Contribution to post-incident reviews (lessons learned)
- Contribute to the continuous improvement of detection rules and SOC processes
Penetration testing & vulnerability management
- Follow-up of external penetration tests (and internal tests if skilled)
o Scoping the tests (scope, objectives)
o Report analysis
o Vulnerability assessment
- Coordinate remediation plans with IT teams
- Participa...