Cyber Security Engineer

Main responsibilities

Operational security & SOC

Monitoring and steering of the SOC (external provider or in-house)

o Security alert analysis

o Incident triage / prioritization

o Follow-up of corrective actions

Active participation in security incident management

o Investigation (SIEM, logs, endpoints, networks)

o Root cause analysis (RCA)

o Contribution to post-incident reviews (lessons learned)

Contribute to the continuous improvement of detection rules and SOC processes

Penetration testing & vulnerability management

Follow-up of external penetration tests (and internal tests if skilled)

o Scoping the tests (scope, objectives)

o Report analysis

o Vulnerability assessment

Coordinate remediation plans with IT teams

Participate in vulnerability management (scanning, prioritization, follow-up)

Governance & cross-functional security

Contribute to the implementation and maintenance of security requirements

o Best practices, hardening, technical guidelines

Participate in security audits (ISO 27001, TISAX, customers)

Provide security support to IT teams (systems, networks, endpoints) Security watch (threats, vulnerabilities, best practices)