Senior CSIRT Analyst

About the role

The Senior CSIRT Analyst will lead the detection, analysis and remediation of cyber security incidents for our clients in Luxembourg. You will work closely with security engineers, developers and infrastructure teams to protect environments and continuously improve our incident response capabilities.

Key responsibilities

• Lead and coordinate cybersecurity incident investigations, including digital forensics and root‑cause analysis.
• Perform incident triage, containment, remediation and recovery, and maintain incident response procedures and forensic playbooks.
• Participate in 24/7 on‑call rotations to support critical customer incidents and contribute to threat intelligence and malware investigations.
• Design, implement and optimise SOAR playbooks and automation scripts to accelerate response and remediation.
• Improve monitoring, logging, alerting and detection across customer environments.
• Integrate security best practices into CI/CD pipelines and cloud‑native architectures, reviewing authentication, authorization and encryption controls.
• Support vulnerability management, penetration testing and secure architecture reviews for cloud platforms (AWS, Azure, GCP) and containerised environments.
• Mentor junior analysts, share knowledge and contribute to research and development projects.

Required profile

• Master’s degree in Cybersecurity, Information Security, Computer Science or equivalent practical experience.
• Minimum 3 years of experience in incident response, digital forensics or CSIRT activities.
• Strong hands‑on expertise in security incident handling and forensic investigation methodologies.
• Solid understanding of DevSecOps principles, secure software delivery and cloud security architectures.
• Ability to operate effectively under pressure and make decisive actions.

Required skills

• Incident response and digital forensics.
• SOAR platforms and automation frameworks.
• Security orchestration and playbook development.
• Authentication protocols, access management and encryption standards.
• Security monitoring and alerting.
• Cloud platforms: AWS, Azure, GCP.
• Kubernetes, containers and CI/CD pipelines.
• DevSecOps, vulnerability management and penetration testing.