Eurofins is expanding its Security Operations Centre (SOC) and is looking to strengthen the SOC Consultant (SOC IR L3) Incident Response team. In this role, you will handle the most complex security incidents, leading deep investigations and driving effective remediation actions.
As a SOC IR L3 Consultant, you will play a key role in the Security Incident Management process—leading resolution efforts, collaborating with cross-functional teams, and applying your expertise to continuously improve the organization’s overall security posture.
The role also includes participation in a 24/7 on-call rotation, shared among team members, to ensure timely response to critical security incidents.
Requirements:
Technical Expertise
5+ years of experience in SOC, Incident Response, DFIR (Digital Forensics and Incident Response), Threat Hunting, or Security Operations.
Deep understanding of:
- Windows, Linux, and Active Directory
- Networking (TCP/IP, DNS, HTTP/S, SMTP, VPN, RDP)
- Cloud security (Azure, M365, AWS, or GCP)
- Identity and Access Management
- Strong knowledge of MITRE ATT&CK, Cyber Kill Chain, IOC and TTP analysis.
Incident Response
- Lead and conduct end-to-end investigations and containment, eradication, recovery, and lessons-learned activities.
- Coordinate major incidents with technical and business stakeholders.
- Develop and maintain SOC procedures and processes
- Conduct host-based and network-based forensic analysis
- Ability to conduct memory investigation and malicious code investigation
Digital Forensics & Malware Analysis
- Memory forensics (Volatility).
- Knowledge from appropriate forensic data acquisition tools (FTK, Autopsy, EnCase, X-Ways).
- Windows artifact analysis (Prefetch, Event Logs, Registry etc.)
- Malware triage and reverse-engineering fundamentals.
- Ability to determine root cause and attack path.
Endpoint & Network Security
- Experience with EDR solutions
- Ability to investigate network logs
Soft Skills
- Excellent analytical and problem-solving skills.
- Ability to work independently during critical incidents.
- Strong high-level communication
- Ability to write executive-level incident reports and post-incident reports.
Leadership Expectations
- Mentor L1/L2 analysts.
- Lead and conduct investigations with minimal supervision.
- Drive improvements in detection capabilities and incident readiness.
- Develop playbooks, procedures, and response processes