Senior Cyber Defense Specialist Incident Response

Will you help us keep our energy system safe and future-proof? Enexis is in the midst of the energy transition and, as a regional grid operator, is a crucial part of the vital infrastructure of the Netherlands. That makes our digital environment attractive to attackers, and challenging for you as a Cyber Defense Specialist.

To stay one step ahead, we are building a next-generation, tier-less Security Operations Center (SOC) within our Digital Resilience Center: a tech-driven team focused on automation, continuous improvement, and minimal manual effort.

For our Cyber Defense team, we are looking for an experienced Incident Response Specialist who can lead, coordinate, and investigate complex cyber incidents. You combine technical depth with strong communication skills and actively contribute to increasing the cyber resilience of Enexis.

A cyber incident never stands alone. Therefore, you lead the full incident response: from preparation and detection to containment, recovery, and evaluation. During major incidents, you support the crisis team and ensure that technical insights are translated into clear advice and actions. You also dive into the technology yourself. You perform digital forensic investigations, analyze malware, and reconstruct attacker behavior. In this way, you map out the cause, impact, and scope of an incident. You translate lessons from incidents into better playbooks, processes, monitoring, detection, and automation. Additionally, you participate in the SOC and work on the further development of the tier-less way of working. The goal is clear: automate more, improve continuously, and keep manual work to a minimum.

• Leading and coordinating the response to cyber incidents, from preparation and identification to containment, eradication, recovery, and lessons learned.
• Supporting the crisis team during major cyber incidents.
• Performing digital forensic investigations, malware analysis, and endpoint investigation.
• Reconstructing attacker behavior and determining the cause, impact, and scope of incidents.
• Developing and maintaining incident response playbooks and processes.
• Advising on monitoring, detection, and response capabilities and contributing to the further development of the SOC.
• Collaborating with SOC, Threat Hunting, and CASM and acting as the technical point of contact for management and other stakeholders.
• Contributing to tabletop sessions, cyber crisis training, and the improvement of Incident Response within the SOC.