{"id":4333573,"url":"https://alion.io/job/kbc-cybersecurity-incident-handler","title":"Cybersecurity Incident handler","company":{"id":1783831,"name":"KBC","domain":"kbc.be","url":"https://alion.io/company/kbc-be","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Career sitemap","truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Belgium"],"countries":["BE"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Crowdstrike","optional":false},{"name":"IBM QRadar","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"SentinelOne","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false}],"status":"live","first_seen_at":"2026-11-15T09:33:40Z","employer_posted_date":"2026-11-15","last_verified_at":"2026-11-15T09:33:40Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Wat houdt deze vacature in?\nMee de verdediging van KBC tegen cyberdreigingen vormgeven, dat is waar jij het verschil maakt als Cyber Security Incident Handler.\nAls onderdeel van ons Computer Security Incident Response Team (CSIRT) werk je in het hart van onze cyberdefensie. Je behandelt niet zomaar incidenten, je neemt ownership, leidt de respons en brengt duidelijkheid in kritieke situaties. Je werkt nauw samen met SOC-analisten, threat intelligence teams, IT en senior stakeholders binnen de organisatie. Dit is een rol met zichtbaarheid en impact: je vertaalt complexe technische incidenten naar heldere inzichten, stuurt gecoördineerde acties aan en helpt de algemene securityweerbaarheid van KBC te versterken.\nWat verwachten we van jou?\nJe neemt de lead in het analyseren en beheren van complexe cyberincidenten (malware, ransomware, phishing, APT’s).\nJe coördineert de incident response over verschillende teams heen en zorgt voor snelle en doeltreffende besluitvorming.\nJe voert diepgaande root cause analyses en impactanalyses uit om structurele verbeteringen te sturen.\nJe adviseert zowel technische teams als senior stakeholders over containment-, eradication- en recoverystrategieën.\nJe communiceert helder en overtuigend-zowel met engineers als met senior management.\nJe stelt gestructureerde en overtuigende rapporten en presentaties op die aanzetten tot actie en leren.\nJe verbetert continu en helpt mee vorm te geven aan incident response playbooks en processen.\nJe draagt bij aan awareness, opleidingen en kennisdeling binnen de organisatie.\nJe neemt deel aan escalaties en wachtdiensten en treedt op als trusted expert in situaties met hoge druk.\nJouw troeven?\nJe hebt een masterdiploma en minstens 5 jaar ervaring in cybersecurity, waarvan minstens 3 jaar in incident response.\nZo heb je:\naantoonbare ervaring in een CSIRT-, CERT- of SOC-omgeving\n grondige kennis van:SIEM-platformen (bijv. Splunk, Sentinel, QRadar\nEDR/XDR tools (bijv. Defender, CrowdStrike, SentinelOne)\nNetwerkprotocollen en -analyse\nMITRE ATT&CK framework.\n\nJe communiceert vlot in het Nederlands en Engels.\nWat hebben we je te bieden?\nBij ons ben je zeker van een uitstekende onboarding, collegialiteit en een aangename werksfeer.\nDoorheen je hele loopbaan bij KBC moedigen we je aan om verder te groeien als persoon en als professional. Je kan opleidingen volgen waarin je je hard en soft skills verder aanscherpt.\nJe kan tot 50% per maand telewerken. Tegelijk hechten we veel belang aan een goede groepssfeer. Daarom werk je minstens twee dagen per week op dezelfde fysieke locatie als je directe collega’s.\nFlexibele werkuren helpen je om je werk en je privéleven op elkaar af te stemmen.\nWe bieden jou een contract van onbepaalde duur en een competitief loon aangevuld met extralegale voordelen.\nSounds familiar? Tuurlijk, dit lees je in elke vacature. KBC maakt het verschil met een uitgebreid flexpakket. Te uitgebreid om hier uit de doeken te doen. De verschillende voordelen - groot en klein - bespreken we graag met jou tijdens je sollicitatiegesprek.","description_format":"text","description_chars":3055,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"Dutch","level":"Advanced (C1)","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Commercial & Retail Banks","Property & Casualty Insurance"],"lifecycle":[{"event":"open","at":"2026-11-15T09:33:40Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":12,"reasons":["conf:5","win:early"],"computed_at":"2026-11-15T14:43:20Z"},"pay":null,"html_url":"https://alion.io/job/kbc-cybersecurity-incident-handler","json_url":"https://alion.io/job/kbc-cybersecurity-incident-handler.json","meta":{"generated_at":"2026-11-15T14:43:20Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":6190,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1783831},"rest":"https://alion.io/mcp/rest/get_company?id=1783831"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fkbc-cybersecurity-incident-handler"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fkbc-cybersecurity-incident-handler"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fkbc-cybersecurity-incident-handler"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/kbc-cybersecurity-incident-handler\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fkbc-cybersecurity-incident-handler"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4333573}},{"tool":"search_jobs","arguments":{"company":"kbc.be","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4333573},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}