Incident Responder - Dutch speaking (m/f/d)

About the role

Baobab Risk Solutions is looking for a Dutch‑speaking Incident Responder to join its cyber security team in Rotterdam. You will work on real‑time ransomware, business‑email‑compromise and other cyber incidents, helping clients restore services and strengthen their defenses.

Key responsibilities

• Execute containment, forensic investigation and evidence preservation for ransomware, BEC and related incidents.
• Support system restoration by assessing backups, rebuilding servers/endpoints and validating services before they go live.
• Collaborate with client IT teams and managed service providers across Windows, Active Directory, Microsoft 365, virtualization and backup environments.
• Document technical work, communicate progress and escalations, and improve recovery playbooks based on case lessons.
• Leverage cutting‑edge AI tools for log analysis, information extraction and automation, experimenting with new approaches.

Required profile

• Professional proficiency in Dutch and English for client communication and coordination.
• Minimum 2 years of hands‑on experience in IT support, systems administration, recovery or incident response.
• Experience with SIEM, EDR and forensic tools (e.g., Splunk, CrowdStrike, Velociraptor, X‑Ways, KAPE, Hayabusa, SOF‑ELK, OpenRelik).
• Basic documentation skills for tickets, change logs or recovery notes.
• Openness to coaching, feedback and continuous skill development.

Required skills

• SIEM and EDR platforms
• Windows Defender for Business
• Splunk
• CrowdStrike
• Velociraptor
• X‑Ways, KAPE, Hayabusa, SOF‑ELK, OpenRelik
• Windows, Active Directory, Microsoft 365
• Virtualization and backup technologies
• AI tools for log analysis and automation

What we offer

• Hybrid work model: up to two days remote and two days onsite in Rotterdam.
• Competitive salary with VSOP equity options.
• 28 vacation days plus Christmas Eve and New Year’s Eve.
• Continuous learning support, including Udemy Business access.
• Clear career progression in a fast‑growing cyber security company.