Details of the offer for Medior Threat Hunter / Incident Responder M/W about forensics at Proximus Luxembourg in Bertrange

About Proximus Luxembourg
Proximus Luxembourg is a leading historical player in the ICT & Telecoms markets. Proximus Luxembourg addresses both residential and business markets through its commercial brands Tango, Telindus and more recently Codit.

With PSF support status, the company has almost 750 employees. All these experts share a passion for digital technology, a spirit of openness and innovation, and a desire to simplify, connect and make their customers' personal and professional activities ever more secure.

Proximus Luxembourg is actively contributing to the acceleration of Luxembourg's digitalisation and its economic influence through the development of connectivity, resilient infrastructures and 5G, as well as innovative technologies such as Blockchain, Artificial Intelligence, Machine Learning and IoT.

Proximus Luxembourg is a subsidiary of the Proximus group (Euronext Brussels: PROX), provider of digital services and communication solutions operating in the Belgian and international markets.

Telindus Luxembourg – Share more than technologies!

Telindus is a brand of Proximus Luxembourg.

Founded in 1979, Telindus Luxembourg accompanies all organizations in their digital transformation, by providing holistic ICT & Telecommunication solutions, as well as tailored support services. Its areas of expertise include Telecommunication Services, ICT Infrastructure, Multi-Cloud, Digital Finance Solutions, Cybersecurity, Business Applications, Managed Services and Training.

Always in search of innovation, Telindus works daily to boost the growth of its customers.–

Job Content :


To support the development of the Telindus-CSIRT activities, Proximus Luxembourg S.A. is looking for a medior Threat Hunter and Incident Responder.
The Telindus-CISRT (Cyber Security Incident Response Team) is responsible for managing and responding to cybersecurity and computer security incidents originating from or targeting Proximus Luxembourg S.A. Autonomous System AS56665. This team is also responsible for responding to cybersecurity and computer security incidents internally for Proximus Luxembourg S.A and their clients by containing, eradicating the threat and recovering from security incidents to ensure a return to operational condition in the safely manner and protect them against new emerging threats. The Telindus-CSIRT is TI (Trusted Introducer) Accredited since March 2016 and an active member of the CERT.LU community.


As a Threat Hunter and Incident Responder, you will:

  • Conduct host forensics, network forensics and log analysis in support of incident response engagements
  • Stay up to date with new trends in Tactics, Techniques and Procedures used by attackers.
  • Stay up to date with new vulnerabilities to protect Proximus Luxembourg and its customers.
  • Develop your “purple mindset” by participating to adversary emulation missions to evaluate customers posture against current threat actors.
  • Proactively search for cyber threats operating undetected on customers’ network.
  • Help our customers to be prepared to limit the impact of a security incident and recover from it.
  • Act as Tier 3 for the Telindus-CSIOC (Cyber Security & Intelligence Operations Center)
  • Collaborate with the Telindus-CSIOC to develop new use cases covering new threat actors TTPs.
  • Building, maintaining, and upgrading computer forensics hardware and software in the Telindus-CSIRT Forensics lab
  • Be part of the exciting journey of developing CSIRT activities, participating and sharing knowledge with the infosec community.
  • Share Telindus-CSIRT activities via social media such as the Telindus blog and Telindus-CSIRT twitter (@TelindusCSIRT).

Profile :

  • Ability to work in a team, communicate with clients, and deliver quality analysis and deliverables
  • 2+ years hands-on experience in cyberdefense with a focus on digital forensics and incident response activities.
  • You have some experience on one or more of the following domains:
  • Intrusion analysis
  • Incident Response and Forensics
  • Malware Analysis and Reverse Engineering
  • Threat Hunting
  • Cyber Threat Intelligence
  • Scripting (PowerShell/Python)
  • Social, verbal and written communication skills; ability to present complex topic to a variety of audiences
  • Ability to share on-call periods, unplanned remote and onsite response efforts
  • You are motivated, curious and eager to learn new things and to stay up to date with new trends in Tactics, Techniques
  • and Procedures used by attackers.
  • Good English and French communications skills, both verbal and written.
  • GIAC or other relevant industry certifications are a plus.

If at the end of the process your application is successful, you will be asked for a criminal record