Staff Cybersecurity Specialist – Incident Response (NL)
Eye Security · Remote · Netherlands ·
COMPENSATION
€•• – ••k
Listed on the employer's job board (Ashby)
- Staff level role
- Fully remote (EU)
- Dutch fluency required
- Incident Response focus
- MDR environment
Join the Security Operations team as a senior individual contributor leading incident response engagements from investigation to recovery. You will act as a technical authority, mentoring junior responders and driving improvements across security operations for over 1,000 customers.
This role combines operational response with strategic initiatives, allowing you to leverage large security datasets and contribute to internal research. You will collaborate with experts from intelligence, military, and tech backgrounds in a remote-friendly environment.
What you'll do
- Lead cyber incident response engagements from intake through recovery
- Act as technical lead during investigations and coordinate response activities
- Conduct forensic investigations to determine attack scope and root cause
- Provide clear technical guidance to customers during active incidents
- Mentor junior and medior responders to raise team technical maturity
- Improve incident response methodologies, playbooks, and operational processes
- Support MDR and Security Operations activities between active cases
- Collaborate with legal counsel, law enforcement, and regulators when needed
What you'll need
- 6+ years of experience in cybersecurity and Incident Response
- Proven ability to lead and manage cybersecurity incidents end-to-end
- In-depth knowledge of Windows, Linux, and macOS operating systems
- Strong understanding of enterprise infrastructure and network security
- Experience with EDR platforms like CrowdStrike or SentinelOne
- Knowledge of cloud security concepts across Azure, AWS, or Google Cloud
- Strong investigative skills with experience analyzing evidence
- Ability to communicate technical findings to non-technical stakeholders
- Fluency in English and C2 fluency in Dutch
Nice to have
- Experience developing scripts or tools for investigations
- Background in technical security research
- Knowledge of threat actor tactics, techniques, and procedures
- Experience working in CERT, CSIRT, MDR, or DFIR environments
Stack
- CrowdStrike Falcon
- Microsoft Defender for Endpoint
- SentinelOne
- Windows
- Linux
- macOS
- Microsoft 365
- Azure
- AWS
- Google Cloud
How you'll work
- Fully remote with quarterly meetups
- Annual company retreats in Europe
- Reports to Director of Security Operations
- Dutch language required for client communication
What you get
- Generous time-off policy including wellbeing days
- Volunteering days included
- Thursday socials to stay connected
- Work with professionals from national CERTs and intelligence