> Markdown version of [/jobs/ext/747419-technical-team-lead-csirt-jp054310](https://www.wearedevelopers.com/jobs/ext/747419-technical-team-lead-csirt-jp054310). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Technical Team Lead CSIRT : JP054310 - **Company:** ITProposal - **Location:** Brussel, Belgium - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Apple IOS, Configuration Management, Cyber Security, Computer Telephony Integration, Digital Forensics, Mobile Application Software, Python (Programming Language), Open Source Technology, Windows PowerShell, Red Hat Enterprise Linux, Security Information and Event Management, Software Vulnerability Management, Scripting, Mitre Att&ck, Malware, Cyber Threat Analysis, Splunk, Blue Team (Cyber Security), Security Orchestration, Automation & Response - **Published:** June 20, 2026 - **Apply:** https://www.adzuna.be/details/5769062345 ## About the Role * Minimum 7 years of experience in a similar cyber security leadership or incident response role. * Strong expertise in Security Operations, Incident Response, Digital Forensics, Malware Analysis, Vulnerability Management, and Blue Team operations. * Extensive experience with SIEM technologies, particularly Splunk Enterprise Security. * Experience securing mobile applications on iOS and Android platforms. * Strong understanding of encryption, compliance, and security governance in highly regulated environments. * Proficiency in Enterprise Linux and scripting languages such as Python and PowerShell. * Experience analyzing emerging vulnerabilities and assessing organizational risk. * Strong analytical, troubleshooting, and problem-solving skills. * Excellent communication skills with the ability to engage stakeholders at all levels. * Commitment to continuous learning and staying current with cyber security trends. Preferred Qualifications * Certifications such as OSCP, GCIH, GCIA, GNFA, CISSP, or CISM. * Knowledge of security frameworks and best practices, including MITRE ATT&CK and NIST. * Experience with ITIL processes and change management. Languages * Fluent English (written and spoken). * Good working knowledge of Dutch and/or French. Additional Requirements * Belgian nationality is mandatory. * Valid National, NATO, and EU security clearance at SECRET level or higher is required. * Ability and willingness to work 100% on-site in Brussels. Personal Attributes * Strong analytical and problem-solving mindset. * Hands-on and practical approach to security operations. * Excellent leadership and teamwork skills. * Detail-oriented with strong documentation and configuration management practices. ## Description * Lead and manage the CSIRT team, including planning, prioritization, and capability development. * Design, implement, and maintain CSIRT infrastructure, including SIEM, SOAR, and Cyber Threat Intelligence (CTI) platforms. * Develop and automate security processes using Python and other scripting languages. * Implement and manage open-source security tools and monitoring solutions. * Coordinate incident response activities, including triage, forensic investigations, root cause analysis, and remediation. * Design and implement security monitoring controls to protect critical systems. * Analyze security logs, investigate incidents, and prepare technical reports. * Monitor vulnerabilities, assess their impact, and support remediation efforts. * Track and analyze cyber threat intelligence feeds and emerging threats. * Maintain technical documentation, procedures, and operational playbooks. * Define and report on CSIRT performance metrics, KPIs, and service effectiveness. * Support escalations, change activities, and collaboration with internal stakeholders. ## Related Videos - [Enhancing Workload Security in Kubernetes](https://www.wearedevelopers.com/videos/356-enhancing-workload-security-in-kubernetes) - [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture) - [Xcode development redefAIned](https://www.wearedevelopers.com/videos/100195-xcode-development-redefained) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Full Spectrum File Uploads](https://www.wearedevelopers.com/videos/870-full-spectrum-file-uploads) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Best Companies in the Netherlands: Top 25 Companies in 2023 ](https://www.wearedevelopers.com/magazine/193-best-companies-in-the-netherlands-top-25-companies-in-2023) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents)