Tasks

• Develop and refine digital forensics processes that support the full Incident Management lifecycle

• Create forensic handbooks, playbooks, runbooks, and procedural documentation for CSIRT team

• Define standardized workflows for evidence handling preservation, escalation, and reporting

• Build forensic readiness processes to strengthen organizational resilience

• Develop and deliver training, exercises, and knowledge‑transfer sessions for CSIRT analysts

• Ensure alignment with global standards (ISO 27035, ISO 27037, NIST, SANS)

• Collaborate ArchOps to ensure process adoption

• Continuously improve documentation and processes based on lessons learned and evolving threats

• Provide expert guidance on digital forensics best practices 

Ideal Profile

• Experience in digital forensics, incident management, and security operations

• Strong understanding of forensic principles and their role in the incident lifecycle

• Experience creating operational documentation such as playbooks or procedures

• Ability to translate technical forensic concepts into clear, structured guidance

• Experience delivering training or workshops

• Familiarity with forensic tools and evidence‑handling concepts (hands‑on use not required)

• Excellent communication and documentation skills

• Ability to work independently and manage process‑development tasks

• Fluent in English (written and spoken)

• Dutch language skills are a plus