Incident response lead dfir Vacatures

Over de vacature

Overview

In this role you will help build and mature an Incident Response capability within a growing Netherlands-based cyber security practice. You will blend hands-on DFIR work with leadership, customer engagement and practice development to shape the service's direction. You'll own incident responses, playbook creation, and cross-functional collaboration to drive measurable security outcomes. This is a chance to influence how a developing IR offering scales and delivers impact for clients.

Verantwoordelijkheden

• Build and grow the Incident Response practice in the Netherlands
• Lead and coordinate responses to complex cyber security incidents
• Develop and mentor IR consultants
• Manage full incident lifecycle: triage to post-incident review
• Coordinate Digital Forensics & Incident Response (DFIR) activities
• Engage with customers during business-critical security incidents
• Create and refine Incident Response playbooks, processes and procedures
• Conduct root-cause analysis and provide actionable recommendations
• Support cyber readiness assessments, tabletop exercises and simulations
• Collaborate with SOC, Threat Intelligence, Forensics and broader Cyber Security teams
• Participate in the team's on-call Incident Response capability
• Shape longer-term growth and direction of the IR offering

Belangrijkste vereisten

• 3-4+ years in Incident Response/DFIR, ideally in consulting, MSSP or enterprise security

• Experience handling ransomware, malware, phishing, account compromise, data breaches, advanced attacks

• Knowledge of SIEM, EDR/XDR, endpoint and network investigations, cloud environments, threat intelligence

• Familiarity with MITRE ATT&CK and NIST frameworks

• Previous leadership experience is beneficial or readiness to move into management

• Fluent Dutch (required for customer-facing/on-call work)

• Based in the Netherlands and able to support local customers

• customer engagement

• leadership

• cross-functional collaboration

• SIEM

• EDR/XDR

• endpoint and network investigations