> Markdown version of [/jobs/ext/3099938-incident-responder](https://www.wearedevelopers.com/jobs/ext/3099938-incident-responder). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Incident Responder

- **Company:** Baobab Risk Solutions
- **Location:** Rotterdam, Netherlands (Remote available)
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Active Directory, Backup Devices, Information Extraction, Log Analysis, Security Information and Event Management, Virtualization Technology, Forensic Toolkit, Break Fix, Cybercrime, Splunk
- **Published:** September 27, 2026
- **Apply:** https://startup.jobs/incident-responder-dutch-speaking-m-f-d-baobab-insurance-gmbh-compan-10204853

## About the Role

* Professional working proficiency in Dutch and English for client discussions, written updates and coordination with international response partners.
 * 2+ years of hands-on experience in IT support, systems administration, recovery or incident response.
 * Experience using SIEM, EDR and forensic tools, such as Windows Defender for Business, Splunk, CrowdStrike, Velociraptor, X-Ways, KAPE, Hayabusa, SOF-ELK or OpenRelik. (These are examples; experience with comparable tools is equally relevant.)
 * Basic experience documenting technical work in tickets, change logs or recovery notes.
 * Practical experience using AI tools for technical tasks, such as information extraction, log analysis or agentic workflows.
 * Openness to coaching and feedback, and motivation to develop your security and investigation skills.

Languages

 * Dutch - business fluent
 * English - business fluent

Requirements that give you an edge

 * Strong practical restoration experience, ideally with SMEs or small IT teams.
 * Hands-on troubleshooting and backup or restore knowledge, with willingness to learn unfamiliar technologies.
 * Familiarity with threat hunting and using threat intelligence to guide investigations, prioritize suspicious activity and assess indicators of compromise.

## Description

* Execute containment and forensic investigation of ransomware, business email compromise and other incidents: preserve evidence, analyze host and identity logs, and develop findings with specialist guidance.
 * Support systems restoration after cyber incidents: assess backups, rebuild servers and endpoints, resolve dependencies and validate services before returning them to use.
 * Work with client IT teams and managed service providers across Windows, Active Directory, Microsoft 365, virtualization and backup environments.
 * Document technical work and communicate progress, uncertainties and blockers, escalating risks to the lead.
 * Put cutting-edge AI tools to work in investigations, recovery and automation. Experiment with new approaches, validate results and help shape how the team adopts them, while protecting incident data.
 * Improve recovery checklists, scripts and playbooks by sharing lessons from casework.


## Related Videos

- [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime)
- [Applying Agile Principles to Incident Management ](https://www.wearedevelopers.com/videos/101-applying-agile-principles-to-incident-management)
- [Data Mining Accessibility](https://www.wearedevelopers.com/videos/802-data-mining-accessibility)
- [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture)
- [Deep Fakes: The Lies We Can’t See](https://www.wearedevelopers.com/videos/1187-deep-fakes-the-lies-we-can-t-see)
- [Fast, Confident, and Wrong: When AI Fails at Accessibility](https://www.wearedevelopers.com/videos/100030-fast-confident-and-wrong-when-ai-fails-at-accessibility)

## Related Articles

- [Best Companies in the Netherlands: Top 25 Companies in 2023 ](https://www.wearedevelopers.com/magazine/193-best-companies-in-the-netherlands-top-25-companies-in-2023)
- [How to land a developer job in Amsterdam](https://www.wearedevelopers.com/magazine/36-how-to-land-a-developer-job-in-amsterdam)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [How to Find Tech Jobs in Amsterdam](https://www.wearedevelopers.com/magazine/279-how-to-find-tech-jobs-in-amsterdam)
- [Find a Developer Job: 12 Best Job Sites For Developers](https://www.wearedevelopers.com/magazine/165-find-a-developer-job-12-best-job-sites-for-developers)
- [The Geometry of Incidents: Connecting User Impact to Architecture](https://www.wearedevelopers.com/magazine/764-the-geometry-of-incidents-connecting-user-impact-to-architecture)