Cyber Security - Incident Response Specialist

.

We open up a world of digital opportunities so people live better and work smarter.

Job Content

Within the Information Security & Investigations unit, the Cyber Security Incident Response Team is a centralized security service, responsible for managing cyber security incidents within the Proximus Group. The team is responsible for delivering all relevant services to mitigate an incident as quickly and efficient as possible and to keep (higher) management updated on the progress.

As an Incident Response Specialist in the CSIRT you are responsible to respond to cyber security incidents when they occur. Your main objective is to respond effectively and work together with the technical teams within the different business unit within Proximus.

Your role:

  • You have end-to-end responsibility for coordination of cyber incidents that are being reported by internal or external sources, including: prioritize incidents, identify key people in system teams, organize crisis meetings, send notification alerts to key stakeholders, perform complex incident analysis, perform forensic investigation where applicable, document analysis findings, perform research on threat actor, share and discuss threat information with team and liaise with press team in case of public exposure.
  • You provide expert support to the team that monitors security alerts (Cyber Defence Center).
  • You are responsible for collecting and generating statistical incident information, build reporting, regularly present reporting information to higher management.
  • You liaise with 3rd parties (other telecom operators, security actors, equipment vendors…) to gather intelligence about emerging threats and vulnerabilities. Take appropriate actions accordingly with relevant teams, in order to limit risk and exposure for Proximus.
  • You initiate and participate in expert reviews with engineering and monitoring teams in order to improve security architecture for critical environments, monitoring tools, security processes, cyber defence strategy, etc.
  • You proactively propose improvement actions for IT/Network to reduce/prevent cyber incidents, and perform follow-up until implementation.
  • You provide input for mitigation plan.

 

 

Our Offer

At Proximus you have the possibility to shape your own future and the digital future of our customers. We offer you:

  • Our digital workplace, which assure you a better work-life balance
  • A nice and varied salary package including insurance, a mobility plan of your choice, telecom and other benefits.
  • The opportunity to build your own career and your development thanks to a continuous learning environment and the exhaustive offer of our Proximus Corporate University.

 

Profile

  • You have a master degree and at least 5 years of experience in Information Security area.CISSP, CISM, CISA, CEH, CHFI certificates are considered high value.
  • You have in-depth knowledge of Internet technology and protocols.
  • You are an expert in security vulnerabilities/weaknesses and related attacks.
  • You have a good knowledge of scripting languages (Perl, PHP, Python, shell…).
  • You are flexible and a strong team player.
  • You have great communication skills and experience in participating in (inter)national security information sharing groups.
  • You show integrity & trust while managing confidential information.
  • Experience within telecommunications environment and technologies is considered of high value.
  • Mastering English is a must for the position. Speaking French and/or Dutch is a plus.