Security Engineer (m/f/d)

**DHL Express - a company that connects people!** ================================================= What makes DHL great? Our People! We know each employee’s individual contributions make us the #1 Express Delivery and Logistics Company in the world. DHL Express is committed to maintaining an environment that empowers every team member to make the greatest possible impact on our business. Our corporate culture is about personal commitment – to our business, to each other and to our global communities. DHL is dedicated to being a great place to work. **Start YOUR career with DHL today…** We are looking for a Security Engineer based in Belgium. **Role Purpose** DHL Express is looking for a Security Engineer to strengthen our Cyber Security Incident Response Team. As part of the CSIRT, you will work together with experienced security professionals to detect, investigate and respond to cyber security threats and incidents affecting our international IT environment. **How will you contribute to the success of DHL?** ================================================== * Analyze and triage security events and alerts from multiple security platforms and data sources. * Participate in the investigation and handling of cyber security incidents together with CSIRT colleagues and other technical teams. * Investigate suspicious activity across endpoints, servers, identities, applications and networks. * Use SIEM, EDR/XDR and other security technologies to correlate events, identify unusual behaviour and support investigations. * Help determine the scope, impact and root cause of security incidents and support containment, eradication and recovery activities. * Gather and analyze threat intelligence related to emerging threats, vulnerabilities, exploits and attacker techniques. * Assess vulnerabilities from a security and incident response perspective and support technical teams in prioritizing remediation. * Maintain clear incident documentation, investigation findings and incident timelines. * Contribute to the continuous improvement of CSIRT procedures, playbooks, detection capabilities and lessons learned. **Do you have what it takes?** ============================== * A strong interest in cyber security, incident response and technical investigations. * Good understanding of how IT systems, applications and networks operate. * Knowledge of networking fundamentals and protocols such as TCP/IP, DNS, HTTP/HTTPS and SMTP. * Basic knowledge of Windows and/or Linux operating systems. * Understanding of common cyber threats such as phishing, malware, credential theft, exploitation and unauthorized access. * Strong analytical and troubleshooting skills with the curiosity to investigate problems down to their root cause. * Ability to remain structured and focused when dealing with security incidents. * Ability to document and clearly communicate technical findings to both technical and non-technical audiences. * Willingness to continuously learn and dev