> Markdown version of [/jobs/ext/747333-csirt-technical-team-lead](https://www.wearedevelopers.com/jobs/ext/747333-csirt-technical-team-lead). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # CSIRT Technical Team Lead - **Company:** Keystone Solutions - **Location:** Brussel, Belgium - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Apple IOS, Configuration Management, Cyber Security, Computer Telephony Integration, Mobile Application Software, Python (Programming Language), Log Analysis, Open Source Technology, Windows PowerShell, Red Hat Enterprise Linux, Security Information and Event Management, Software Vulnerability Management, Scripting, Mitre Att&ck, Malware, Splunk, Blue Team (Cyber Security), Security Orchestration, Automation & Response - **Published:** June 20, 2026 - **Apply:** https://be.indeed.com/viewjob?jk=417e0fb6f0c47baf ## About the Role Do you have experience in iOS?, * Minimum 7+ years of experience in a similar role, with in-depth knowledge of encryption, security operations, compliance, vulnerability management, mobile applications, bug bounty programs, blue team expertise, incident response, and forensic capabilities. * Proven knowledge and experience in highly regulated environments regarding security and compliance. * In-depth knowledge of implementing and managing security operations tools and SIEM systems, particularly Splunk Enterprise Security. * Experience securing mobile applications on iOS and Android platforms. * Experience tracking the latest vulnerabilities and assessing their impact. * Proven experience with incident response procedures, forensic techniques, and malware analysis. * Knowledge of relevant regulations and standards in information security. * Good knowledge of Enterprise Linux and one or more scripting languages (Python, Powershell, ...). * Excellent problem-solving skills and strong analytical abilities. * Good communication skills and the ability to effectively communicate with stakeholders at all levels. * A passion for continuous learning and improvement, and the willingness to stay updated on the latest developments in the field. * Willingness to work full-time on-site in Brussels (easily accessible by public transport and free underground parking). * Languages: Dutch and/or French and English (fluent in spoken and written). * Possession of Belgian nationality and a valid security clearance National, NATO & EU, at least level SECRET. Preferred Qualifications: * Certifications such as OSCP, GCIH, GCIA, GNFA, CISSP, CISM. * Knowledge of security frameworks and best practices (MITRE ATT&CK, NIST, ...). * Experience with change management and ITIL processes. Personal Attributes: * Problem-solving and analytical skills. * Practical and hands-on approach. * Strong communication and team-oriented. * Meticulous in documentation and configuration management. If you are ready to tackle technical and strategic challenges in a dynamic consultancy environment, apply today ., * Monitoring SLA / KPI - Level: Expert - Most recent: Any time * Open Source - Level: Expert - Most recent: Any time * Python - Level: Expert - Most recent: Any time * SIEM - Level: Expert - Most recent: Any time Language requirements: Dutch or French Level Active knowledge English Level Active knowledge ## Description We are seeking an experienced Technical Team Lead for our CSIRT team. This position represents a consultancy mission at a client site through Keystone Solutions, where you will lead a growing team of security engineers, coordinate incident response, and develop technical detection and mitigation strategies. You will be responsible for triage, forensic investigation, root-cause analysis, and improving playbooks and automation. Additionally, you will be co-responsible for the security of our systems by designing and implementing adequate monitoring controls., * Design, implement, and maintain a CSIRT infrastructure, including SIEM, SOAR, CTI environment, etc. * Automate and script tasks using Python. * Set up and utilize open-source tooling. * Lead the CSIRT team in planning, prioritization, and ensuring sufficient knowledge within the team. * Report on the performance of the CSIRT team, including providing sufficient KPIs. * Analyze logs and support incident investigations, including reporting. * Draft and maintain technical documentation. * Collaborate with team members and stakeholders; support in escalations and change activities. * Track and analyze vulnerabilities. * Follow up and analyze CTI. ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Enhancing Workload Security in Kubernetes](https://www.wearedevelopers.com/videos/356-enhancing-workload-security-in-kubernetes) - [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture) - [Xcode development redefAIned](https://www.wearedevelopers.com/videos/100195-xcode-development-redefained) - [Full Spectrum File Uploads](https://www.wearedevelopers.com/videos/870-full-spectrum-file-uploads) - [Harnessing Apple Intelligence: Live Coding with Swift for iOS](https://www.wearedevelopers.com/videos/1515-harnessing-apple-intelligence-live-coding-with-swift-for-ios) ## Related Articles - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Where to Find Entry-Level Software Engineering Jobs](https://www.wearedevelopers.com/magazine/397-where-to-find-entry-level-software-engineering-jobs) - [Best Companies in the Netherlands: Top 25 Companies in 2023 ](https://www.wearedevelopers.com/magazine/193-best-companies-in-the-netherlands-top-25-companies-in-2023) - [Find a Developer Job: 12 Best Job Sites For Developers](https://www.wearedevelopers.com/magazine/165-find-a-developer-job-12-best-job-sites-for-developers) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [What’s the Difference between a Junior, Mid, and Senior Developer?](https://www.wearedevelopers.com/magazine/238-what-s-the-difference-between-a-junior-mid-and-senior-developer)