CSIRT L3 Relay – Cybersecurity Operational Coordinator

The CSIRT L3 Relay acts as a Level 3 (N3) cybersecurity operational coordinator and CSIRT support relay for large enterprise clients. Working closely with central SOC/CSIRT teams, this role strengthens local operational support, accelerates response to complex or critical incidents, and provides expert guidance when needed.

The role also supports collaboration across business, functional, and technical teams, ensuring effective escalation management, mitigation tracking, and incident coordination.

Key Responsibilities:

Operational Coordination & Proximity

• Act as the local cybersecurity contact for client sites
• Maintain strong operational proximity with onsite teams
• Liaise between local stakeholders and central SOC/CSIRT teams

Incident & Escalation Management

• Coordinate incident escalations and expert