Teamlead – Security Incident Response

Stack

Responsibilities

• ▹Set up and maintain DFIR tools and infrastructure
• ▹Provide first response during security incidents, including digital forensics and post-incident risk mitigation
• ▹Maintain and improve the SIEM tool
• ▹Improve monitoring and scanning tools to detect security issues and automate routine tasks
• ▹Integrate AI into security operations
• ▹Investigate and respond to security alerts in our systems
• ▹Create and maintain incident response playbooks
• ▹Keep an eye on current threats and zero-day vulnerabilities in cyber security and implement preventative measures within the organization

Requirements

• ▹Background in cyber security
• ▹Experience in incident response, blue teaming or digital forensics, specifically in cloud-native environments
• ▹Proficiency with SIEM tools
• ▹Leadership experience, formal or informal
• ▹Able to write scripts and programs to automate tasks in Python or another programming language (Python programming experience required)
• ▹Uses agentic AI beyond using it as a Q/A chat
• ▹Proficiency with Linux
• ▹Experience with web application firewalls, Cloudflare preferred
• ▹Fluent English (spoken and written)

Nice to have

• ▹Certificates: trainings from SANS / GIAC, OffSec OSI
• ▹Knowledge of Laravel / PHP
• ▹Experience with AWS / GCP
• ▹Experience with GitLab CI/CD pipelines
• ▹Experience with Terraform / Terragrunt
• ▹Experience with digital forensics

Soft skills

About the company

ABOUT YOU runs a fashion online shop; its IT-Security unit makes sure customers have a safe shopping experience and their personal data is secure, while also protecting corporate data and employees' hardware.