Main responsibilities

Operational security & SOC

• Monitoring and steering of the SOC (external provider or in-house)

o Security alert analysis

o Incident triage / prioritization

o Follow-up of corrective actions

• Active participation in security incident management

o Investigation (SIEM, logs, endpoints, networks)

o Root cause analysis (RCA)

o Contribution to post-incident reviews (lessons learned)

• Contribute to the continuous improvement of detection rules and SOC processes

Penetration testing & vulnerability management

• Follow-up of external penetration tests (and internal tests if skilled)

o Scoping the tests (scope, objectives)

o Report analysis

o Vulnerability assessment

• Coordinate remediation plans with IT teams

• Participate in vulnerability management (scanning, prioritization, f...