About the mission

We are seeking a CSIRT Analyst to join our Security Operations Center. The role involves handling complex security incidents, conducting threat hunting, and performing digital forensics. Candidates should have 3-5 years of experience in incident response and strong knowledge of security monitoring tools.

Read the full description

We are looking for a freelance CSIRT / Incident Response Engineer to strengthen our Blue Team in the Security Operations Center. You will be part of a mature MDR environment where you will work on advanced security incidents, threat hunting, and forensics within an enterprise context.

Your role

Handle complex security alerts and incidents (Tier 2 escalations)

Actively participate in incident response and crisis handling

Perform Digital Forensics & Incident Response (DFIR) tasks

Proactively conduct threat hunting based on TTPs

Execute compromise assessments and impact analyses

Gather and analyze threat intelligence (IOCs, TTPs)

Contribute to detection engineering (SIEM, xDR)

Collaborate on purple team exercises with the Red Team

Develop and optimize playbooks (SOAR)

Elaborate processes and procedures around DFIR and threat detection

Participate in an on-call incident response service

Profile

At least 3–5 years of experience in CSIRT, SOC, or incident response

Strong knowledge of:

o Incident Response & Security Monitoring
o Threat Hunting & Threat Intelligence
o Digital Forensics

Experience with MDR tools such as:

o EDR (e.g., CrowdStrike, Defender, SentinelOne)
o SIEM platforms
o xDR / NDR solutions

Hands-on, analytical, and proactive

Strong communication skills

What you'll do

Handle complex security alerts and incidents (Tier 2 escalations)
Actively participate in incident response and crisis handling
Perform Digital Forensics & Incident Response (DFIR) tasks
Proactively conduct threat hunting based on TTPs
Execute compromise assessments and impact analyses
Gather and analyze threat intelligence (IOCs, TTPs)
Contribute to detection engineering (SIEM, xDR)
Collaborate on purple team exercises with the Red Team
Develop and optimize playbooks (SOAR)
Elaborate processes and procedures around DFIR and threat detection
Participate in an on-call incident response service

What we're looking for

At least 3–5 years of experience in CSIRT, SOC, or incident response
Strong knowledge of Incident Response & Security Monitoring
Strong knowledge of Threat Hunting & Threat Intelligence
Strong knowledge of Digital Forensics
Experience with MDR tools such as EDR and SIEM platforms
Hands-on, analytical, and proactive
Strong communication skills
Willingness to work 2 days per week in Hasselt

Skills

EDR (e.g., CrowdStrike, Defender, SentinelOne)
SIEM platforms
xDR / NDR solutions

CSIRT Analyst

This mission closed on 30 Jul 2026.

Open missions like this one