Main responsibilities

Operational security & SOC

- Monitoring and steering of the SOC (external provider or in-house)

o Security alert analysis

o Incident triage / prioritization

o Follow-up of corrective actions

- Active participation in security incident management

o Investigation (SIEM, logs, endpoints, networks)

o Root cause analysis (RCA)

o Contribution to post-incident reviews (lessons learned)

- Contribute to the continuous improvement of detection rules and SOC processes

Penetration testing & vulnerability management

- Follow-up of external penetration tests (and internal tests if skilled)

o Scoping the tests (scope, objectives)

o Report analysis

o Vulnerability assessment

- Coordinate remediation plans with IT teams

- Participa...