CSIRT Level 2 Incident Handler & Digital Forensic Investigator | HT2025PM0702

Customer

Customer is a consulting and technology integration firm specializing in the field of intangible asset security.

Based in the Grand Duchy of Luxembourg since 2012, they support clients throughout the lifecycle of their information systems. Their consulting role allows them to work across the entire project spectrum, and their integration expertise allows them to be a complete partner for their clients in implementing their recommendations.

Language

Language

Level

Frequency

Level

French

Fluent

Daily

C1 – C2

English

Fluent

Daily

C1 – C2

Job Summary

Integrated within dynamic and passionate teams, you will have the opportunity to fully invest yourself, innovate and create from the latest technologies. You will quickly find your place at customer’s organization. In order to understand our business, the challenges of our customers and to accompany them we regularly organize meetings, workshops, and training. We will thus help you to develop your skills and position you on stimulating projects, adapted to your profile and enabling you to surpass yourself.

Responsibilities & Duties

Your team :

As part of a multidisciplinary team, you will work in   CSIRT department. The purpose of the service is to help organizations contain, neutralize and remove intrusions by facilitating detection, manipulation and mitigating actual intrusions. The team is also called upon for post-mortem investigations, where the challenge is to support or refute hypotheses formulated following a proven incident. Thales Cyber Solutions CSIRT is young, ambitious and in development.

Your mission :

You will work on clients various security incidents and help CSOC L2 in incident triage. Your daily task will be the maintenance of CSIRT applications and documentation.

Additionally, you will create detection use cases for CSOC and test them stealthily from time to time in a «Pentest» like engagement.

We will ask you to share your knowledge during training or workshops.

Essential Skills

• Highly motivated, interested in the fields of cyber defence and research.
• First experience in a similar job with a system engineer background.
• SCADA environments familiar.
• Requires analytical thinking skills or analytical and problem-solving skills.
• Dirty and always incomplete” Log analysis capability.
• Could read X86 / 64 assembly, C, C++, .NET
• Could write python.
• Usage of Volatility, Log2Timeline, Misp, IntelMQ, Wireshark, Tshark, Snort
• Network Fundamentals – TCP / IP Protocols (HTTP, DNS, FTP, SSL, etc.)
• Understandings of threat Intel limitation and capacity.
• Any related certification GCIH – (GIAC Certified Incident Handler) etc…
• Deep Understanding of windows, Osx & Linuxes operating systems
• Work calmly and well under pressure
• Maintain composure while dealing with difficult people.
• English B2 minimum

Nice to have Skills

Background Check Required

N / A

Benefits

Interview Process

Two interviews are planned :

HR telephone interview

Technical interview with the manager (by phone, in-person, or in person).

Guarantee Period