Senior CSIRT Analyst

Senior CSIRT Analyst

Languages: English fluent, French is a big asset

Location: Luxembourg

Responsibilities:

Incident Response & Cyber Defense

• Lead and coordinate cybersecurity incident investigations, including digital forensics and root cause analysis
• Conduct incident triage, containment, remediation, and recovery activities
• Develop and maintain incident response procedures, investigation methodologies, and forensic playbooks
• Participate in 24/7 on-call rotations to support critical customer incidents
• Contribute to threat intelligence analysis, malware investigations, and proactive detection activities

CSIRT Operations & Security Automation

• Lead customer onboarding activities for CSIRT services and ensure operational readiness
• Design, implement, and improve SOAR playbooks to automate response and remediation processes
• Develop and maintain internal security tools, automation scripts, and operational documentation
• Improve monitoring, logging, alerting, and detection capabilities across customer environments
• Support the continuous enhancement of security operations processes and response efficiency

DevSecOps & Cloud Security

• Integrate security best practices into CI/CD pipelines and cloud-native environments
• Review and assess authentication, authorization, and identity management mechanisms
• Evaluate data protection controls, encryption mechanisms, and secure storage practices
• Contribute to secure architecture reviews and cloud security assessments
• Define and improve security controls for containerized and distributed environments
• Support vulnerability management and penetration testing activities, either directly or in coordination with specialized teams
• Create and maintain incident response plans and recovery procedures aligned with security standards

Collaboration & Leadership

• Work closely with security analysts, engineers, developers, infrastructure teams, and external stakeholders
• Mentor junior analysts and contribute to knowledge sharing initiatives
• Participate in innovative cybersecurity research and development projects
• Contribute to the evolution of cyber defense capabilities, methodologies, and operational maturity

Profile:

• Master’s degree in Cybersecurity, Information Security, Computer Science, or equivalent practical experience
• Minimum 3 years of experience in Incident Response, Digital Forensics, or CSIRT activities, combined with broader experience in Cyber Defense or Information Security
• Strong hands-on expertise in security incident handling and forensic investigation methodologies
• Solid understanding of DevSecOps principles, secure software delivery, and cloud security architectures
• Experience with SOAR platforms, automation frameworks, and security orchestration processes
• Good knowledge of authentication protocols, access management, encryption standards, and security monitoring practices
• Familiarity with cloud platforms and modern infrastructure environments (AWS, Azure, GCP, Kubernetes, containers, etc.)
• Ability to operate effectively under pressure and make decisions during critical security incidents
• Strong analytical, communication, and problem-solving skills
• Customer-oriented mindset with the ability to work autonomously and collaboratively
• Experience in Threat Intelligence, Malware Analysis, Reverse Engineering, or Threat Hunting
• Security certifications such as CISSP, GCIH, GCFA, GCFE, GREM, OSCP, or equivalent
• Experience with Infrastructure as Code (Terraform, Ansible, etc.) and CI/CD security tooling
• Knowledge of compliance and regulatory frameworks
• French language skills are considered an asset

Interested in this opportunity? Feel free to apply or send us your updated CV at [email protected], [email protected] and [email protected]