CSIRT L3 Relay – Cybersecurity Operational Coordinator
Core
Local cybersecurity operational coordinator and CSIRT support relay for a large international automotive customer, strengthening local support and accelerating response to complex incidents.
Role type
Senior IC cybersecurity operational coordinator
Builds
Incident response capabilities and operational support for client sites
Domain
Automotive industry cybersecurity operations
Deliverable
client delivery
Required skills
Incident response coordination, stakeholder liaison, SIEM platforms (Microsoft Sentinel, QRadar, Splunk/ELK), EDR solutions (CrowdStrike, Microsoft Defender), GCIH or GCFE/GCFA certification, Microsoft SC-200 (Sentinel) certification, English fluency
Preferred skills
Logic Apps, SOAR platforms, threat intelligence tools (MISP, OpenCTI), CISSP, CISM, GREM, CEH, CHFI, automotive/OT/ICS security background, 24/7 SOC experience
Technologies
Microsoft Sentinel, QRadar, Splunk, ELK, CrowdStrike, Microsoft Defender, Logic Apps, MISP, OpenCTI
Responsibilities
Act as local cybersecurity contact for client sites, coordinate incident escalations and expert support, track mitigation and remediation, lead or assist response to complex incidents, translate business needs into cybersecurity requirements, ensure clear communication between local and central teams
Seniority
Senior, hands-on IC
