CSIRT (DIGITAL FORENSICS, INCIDENT HANDLER)

at  LMGC

LMGC is an IT services company which specialized in SAP when it was founded in 2006.
For over 10 years, LMGC has been providing IT expertise to its Luxembourgish and European customers.
Well-known and recognized for its SAP know-how in Europe, LMGC is also a major player in the Greater Region, supporting its customers in the modernization and digitization of their technological structures.
One of the most important services is the the provision of IT profiles for short, medium and long-term consultancy.
To meet our partners’ needs, we make at their disposal not only our IT expertise, but also consultants in all IT fields, such as development, business intelligence, project management, business analysis, networking, systems, security, etc.

CSIRT (DIGITAL FORENSICS, INCIDENT HANDLER)

Location: Luxembourg
Contract Type: CDI
We are seeking a motivated CSIRT Specialist with expertise in Digital Forensics and Incident Handling to join our team of cybersecurity professionals. In this role, you will assist organizations in responding to and mitigating security incidents through host forensics, log
Suivant
analysis, and incident response preparation. Additionally, you will contribute to the development of detection use cases, improve our in-house CSIRT tools, and participate in workshops or training sessions to share knowledge and expertise.
Whether you are an experienced professional or at the early stages of your cybersecurity career, this position offers an excellent opportunity to grow within the field of incident response and cyber defense.

REQUIREMENTS

Extensive experience in Incident Response.
Deep understanding of networks (HTTP2/Quic, DoT/DoH, etc.) and operating system internals.
Proficient in tools like Volatility, Log2Timeline, Wireshark, Tshark, Snort, MISP, IntelMQ.
Skilled in debugging Python 3 code (and occasionally Python 2).
Experience with threat intelligence—understanding its capabilities and limitations.
Ability to work under pressure and maintain composure with stressed stakeholders.
Mentorship skills to support and share knowledge with less experienced team members.
Strong writing and reporting capabilities.

Incident Handling and Response
Conduct host forensics and analyze system logs to support incident response engagements.
Assist customers in preparing for potential security incidents by implementing effective processes.
Leverage TTPs (Tactics, Techniques, and Procedures) gained from engagements to improve detection mechanisms.
Occasionally participate in purple team engagements to validate detection use cases.
Tool Development and Maintenance
Develop and maintain in-house CSIRT tools and applications for more efficient incident handling.
Knowledge Sharing and Training
Conduct training sessions or workshops with customers or peers to share knowledge about incident handling.
Present research or work at security conventions to contribute to the broader cybersecurity community.