CSIRT Manager

Tiime

. Lead and coordinate security incident detection, analysis, and response activities .

Posted 11/3/2026full-timeRemote • FranceMid-LevelSenior💰 €65,000 - €80,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cybersecurity incident detection, analysis, and response, with a strong focus on improving operational resilience and managing service provider relationships. Proficient in compliance with industry standards such as NIS2, DORA, ISO 27001, and GDPR.

Highest-signal resume keywords

Cybersecurity Incident ResponseService Provider ManagementDetection Technologies (SIEM, EDR/XDR, SOAR, NDR)Compliance with NIS2, DORA, ISO 27001, GDPRAttack Techniques and MITRE ATT&CK Knowledge

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

CybersecurityIncident InvestigationForensicsLog AnalysisMalware AnalysisDetection Use Cases DevelopmentSOC KPIs and KRIs MonitoringBudget ManagementService Level Agreements (SLAs)Crisis Management

Soft Skills

DiplomacyNegotiationDecision-Making Under CrisisClear CommunicationAttention to Detail

Tools & Technologies

SIEMEDR/XDRSOARNDRAzureAWSGCP

Industry Keywords

CSIRTMSSPCERTManaged ServicesCyber RiskOperational Resilience

Tech Stack

Tools & technologies

AWSAzureCloudGoogle Cloud Platform

About the role

Key responsibilities & impact

Lead and coordinate security incident detection, analysis, and response activities
Advance the maturity and scope of the CSIRT capability to reduce cyber risk and improve operational resilience
Ensure the quality, effectiveness, and integration of tools and processes, particularly those provided by the CSIRT service provider
Develop and oversee the end-to-end evolution of the detection, analysis, and incident response capability
Define coverage scope and evolve detection use cases
Supervise alert monitoring, triage, and analysis
Coordinate incident management from qualification through closure, including lessons learned
Coordinate IT, business teams, communications, and legal during major incidents
Organize purple team exercises, attack simulations, end-to-end tests, and business continuity/disaster recovery tests
Participate in the Cyber Crisis Management Team
Manage the MSSP contract and relationship, including SLAs, service commitments, penalties, amendments, and renewals
Lead service review meetings and track improvement plans
Challenge service quality and contribute to provider selection or replacement
Manage the capability’s budget and optimize cost-to-value
Define and monitor SOC KPIs and KRIs
Produce dashboards for the CISO, executive management, and governance bodies
Ensure compliance with NIS2, DORA, ISO 27001, and GDPR
Prepare for and support audits related to the capability

Requirements

What you’ll need

Education: Master’s degree (engineering school, Master’s degree in cybersecurity or computer science) or equivalent experience
5 to 7 years of experience in cybersecurity, including at least 3 years in a SOC, CERT, or incident response role
Experience managing service providers (MSSP, MDR, managed services) or service contracts is a major advantage
Strong knowledge of attack techniques, MITRE ATT&CK, and incident investigation and response processes (forensics, log analysis, malware analysis)
Proficiency with detection technologies: SIEM, EDR/XDR, SOAR, NDR
Understanding of cloud environments (Azure, AWS, GCP), networks, and systems
Ability to achieve results without direct line authority over MSSP operators
Strong diplomacy and negotiation skills
Composure and sound decision-making under crisis conditions
Clear communication with technical and non-technical stakeholders
Attention to detail, strong organizational skills, and a continuous improvement mindset

Benefits

Comp & perks

€10 meal voucher on a Swile card, with 50% employer coverage
Profit-sharing bonus
50% reimbursement of public transportation passes, or a sustainable mobility allowance for bicycle or scooter commutes
Access to a benefits platform offering numerous discounts
Additional paid leave
Flexible working hours
Company culture focused on employee well-being
Supportive and innovative working environment