Threat Hunting Analyst

Il y a 5 mois

Mons, Belgique Spektrum Group Temps plein

Spektrum have a wide range of exciting opportunities in several global locations.

We are always looking to add great new talent to our team and look forward to hearing from you.

**Who we are supporting**

The NATO Communication and Information Agency (NCIA) is responsible for providing secure and effective communications and information technology (IT) services to NATO's member countries and its partners. The agency was established in 2012 and is headquartered in Brussels, Belgium.

The NCIA provides a wide range of services, including:

- Cyber Security: The NCIA provides advanced cybersecurity solutions to protect NATO's communication networks and information systems against cyber threats.
- Command and Control Systems: The NCIA develops and maintains the systems used by NATO's military commanders to plan and execute operations.
- Satellite Communications: The NCIA provides satellite communications services to enable secure and reliable communications between NATO forces.
- Electronic Warfare: The NCIA provides electronic warfare services to support NATO's mission to detect, deny, and defeat threats to its communication networks.

Overall, the NCIA plays a critical role in ensuring the security and effectiveness of NATO's communication and information technology capabilities.

**The program**

**Assistance and Advisory Service (AAS)**

The NATO Communications and Information Agency (NCI Agency) is NATO's principal C3 capability deliverer and CIS service provider. It provides, maintains and defends the NATO enterprise-wide information technology infrastructure to enable Allies to consult together under Article IV, and, when required, stand together in the face of attack under Article V.

In order to provide these critical services, in the modern evolving dynamic environment the NCI Agency needs to build and maintain high performance engaged workforce. The NCI Agency workforce strategically consists of three major categorises: NATO International Civilians (NIC)s, Military (Mil) and Interim Workforce Consultants (IWC)s. The IWCs are a critical part of the overall NCI Agency workforce and make up approximately 15 percent of the total workforce.

**Role Background**

As a Cyber Security Threat Hunting Analyst they will work alongside a team of Security Analysts to proactively detect cyber security attacks against NATO networks. They will research and and react to the latest threats, using industry leading tools to discover new and ongoing attacks.

**Role Duties and Responsibilities**
- Develop hypotheses to be used in a threat hunt for given threat groups.
- Create security tool content such as searches, reports and dashboards to facilitate threat hunting.
- Perform indepth analysis to deliver conclusions and recommendations.
- Review and develop logging configurations to enable a comprehensive threat hunting capability.
- Develop and document threat hunting procedures.
- Document analysis, findings, and recommendations in reports and presentations to be delivered to stakeholders.
- Tasks in support of NATO network monitoring and other NCSC Operations branch activities.

**Essential Skills and Experience**
- Experience in analysis of threat actor group attack patterns, tactics, techniques, and procedures (TTPs).
- Knowledge of the TaHiTI threat hunting methodology and the MITRE ATT&CK framework.
- Strong analytical and problem-solving abilities, ability to identify patterns, detect anomalies and make accurate, informed decisions.
- Experience in performing indepth cyber security analysis in large, complex networks using security use cases, relevant datasets, and documentation.
- Experience in performing indepth cyber security analysis in large, complex networks using security use cases, relevant datasets, and documentation
- Expertise in at least three of the following areas and a high level of experience in several of the other areas:

- Cyber security threat hunting
- Security Information and Events Management systems (SIEM) - e.g. Splunk
- Splunk processing language
- Network and host based intrusion detection systems
- Sysmon configuration, Windows, and Linux log analysis
- Full Packet Capture systems (FPC) - e.g. Niksun, RSA/NetWitness
- Data visualisation and statistical analysis
- Technical report writing
- Good written and verbal communication skills (English)

**Desirable Skills and Experience**
- A good understanding of Security, Orchestrations, Automation and Response (SOAR) concepts and their benefits to the protection of CIS infrastructures.
- Strong knowledge of malware families and network attack vectors.
- Experience in intrusion detection and incident handling.
- Ability to analyse attack vectors against a particular system to determine attack surface.
- Industry leading certification in the area of cyber security such as GCFA, GCIA, GNFA.

**Education**

**Working Location**
- Mons, Belgium

**Working Policy**
- On-Site

**Travel**
- Some travel to other NATO sites may be required

**Contr

  • Threat Hunting Analyst

    Il y a 5 mois

    Mons, Belgique Enterpryze Consulting Ltd. Temps plein

    **Threat Hunting Analyst - **Working Location**:Mons, Belgium** - **Security Clearance**: NATO Secret** - **Language**:High proficiency level in English language **EXPERIENCE AND EDUCATION: **Essential Qualifications/Experience: - Experience in analysis of threat actor group attack patterns, tactics, techniques, and procedures (TTPs). - Knowledge of the...

  • Security Event Analyst

    Il y a 5 mois

    Mons, Belgique Uni Systems Temps plein

    At Uni Systems, we are working towards turning digital visions into reality. We are continuously growing and we are looking for a professionalSecurity Event Analyst to join our UniQue Mons team. In this role, you will have the opportunity to work closely with our customers in the public sector and you will be responsible for developing new business by...

  • Ci/humint Analyst

    Il y a 5 mois

    Mons, Belgique SOSi Temps plein

    **Overview** SOSi is seeking a Counterintelligence/Human (CI/HUMINT) Intelligence Analyst to join a large intelligence and technical support program for contingency operations, battle staff and operational-level planning, joint and multi-lateral training exercises, and strategic engagement policy throughout Europe. **Essential Job Duties** - Analyzes...

  • Ci/humint Analyst

    Il y a 6 mois

    Mons, Belgique SOSi Temps plein

    Overview SOSi is seeking a Counterintelligence/Human (CI/HUMINT) Intelligence Analyst to join a large intelligence and technical support program for contingency operations, battle staff and operational-level planning, joint and multi-lateral training exercises, and strategic engagement policy throughout Europe. **Responsibilities**: - Analyzes CI/HUMINT...

  • First Line Security Event Analyst

    Il y a 5 mois

    Mons, Belgique Enterpryze Consulting Ltd. Temps plein

    **First Line Security Event Analyst (FLSEA) 6 - **Working Location**:Mons, Belgium** - **Security Clearance**: NATO Secret** - **Language**:High proficiency level in English language **EXPERIENCE AND EDUCATION: **Essential Qualifications/Experience: - Comprehensive knowledge of the principles of computer and communications security including knowledge of...

  • Cyber Analyst 3

    Il y a 5 mois

    Mons, Belgique Enterpryze Consulting Ltd. Temps plein

    **Cyber Analyst 3 - **Working Location**:Mons, Belgium** - **Security Clearance**: NATO Secret** - **Language**:High proficiency level in English language **EXPERIENCE AND EDUCATION: **Essential Qualifications/Experience: - Knowledge and multiyear experience in organization, management and support of various (international) operations, activities, units...

  • First Line Security Event Analyst

    Il y a 5 mois

    Mons, Belgique Vector Synergy Temps plein

    **Location**: Mons, Belgium **Security Clearance**: NATO Secret **Reference No**: C001782 / Mons **Skills, knowledge, experience required**: - The lack of a degree may be compensated by at least 3 years of relevant experience in field of cyber security analysis; - Comprehensive knowledge of the principles of computer and communications security including...

  • First Line Security Event Analyst

    Il y a 6 mois

    Mons, Belgique Enterpryze Consulting Ltd. Temps plein

    **First Line Security Event Analyst (FLSEA) 1 - **Working Location**:Mons, Belgium** - **Security Clearance**: NATO Secret** - **Language**:High proficiency level in English language **EXPERIENCE AND EDUCATION: **Essential Qualifications/Experience: - Comprehensive knowledge of the principles of computer and communications security including knowledge of...

  • First Line Security Event Analyst

    Il y a 6 mois

    Mons, Belgique Enterpryze Consulting Ltd. Temps plein

    **First Line Security Event Analyst (FLSEA) 3 - **Working Location**:Mons, Belgium** - **Security Clearance**: NATO Secret** - **Language**:High proficiency level in English language **EXPERIENCE AND EDUCATION: **Essential Qualifications/Experience: - Comprehensive knowledge of the principles of computer and communications security including knowledge of...

  • First Line Security Event Analyst

    Il y a 5 mois

    Mons, Belgique Vector Synergy Temps plein

    **Location**: Mons, Belgium **Security Clearance**: NATO Secret **Reference No**: C003333 / Mons **Skills, knowledge, experience required**: - The lack of a degree may be compensated by at least 3 years of relevant experience in field of cyber security analysis; - Comprehensive knowledge of the principles of computer and communications security including...

  • First Line Security Event Analyst

    Il y a 5 mois

    Mons, Belgique Enterpryze Consulting Ltd. Temps plein

    **First Line Security Event Analyst (FLSEA) 1 **Working Location**:Mons, Belgium - **Security Clearance**: NATO Secret** - **Language**:High proficiency level in English language **EXPERIENCE AND EDUCATION: **Essential Qualifications/Experience: - Comprehensive knowledge of the principles of computer and communications security including knowledge of TCP/IP...

  • First Line Security Event Analyst

    Il y a 5 mois

    Mons, Belgique Enterpryze Consulting Ltd. Temps plein

    **First Line Security Event Analyst (FLSEA) 6 - **Working Location**:Mons, Belgium** - **Security Clearance**: NATO Secret** - **Language**:High proficiency level in English language **EXPERIENCE AND EDUCATION: **Essential Qualifications/Experience: - Comprehensive knowledge of the principles of computer and communications security including knowledge of...

  • Data Analyst

    Il y a 5 mois

    Mons, Belgique Spektrum Temps plein

    Spektrum have a wide range of exciting opportunities in several global locations. We are always looking to add great new talent to our team and look forward to hearing from you. **Who we are supporting** The NATO Communication and Information Agency (NCIA) is responsible for providing secure and effective communications and information technology (IT)...

  • Data Analyst

    Il y a 5 mois

    Mons, Belgique Spektrum Temps plein

    Spektrum have a wide range of exciting opportunities in several global locations. We are always looking to add great new talent to our team and look forward to hearing from you. **Who we are supporting** The NATO Communication and Information Agency (NCIA) is responsible for providing secure and effective communications and information technology (IT)...

  • Data Analyst

    Il y a 2 mois

    Mons, Belgique Spektrum Temps plein

    Spektrum have a wide range of exciting opportunities in several global locations. We are always looking to add great new talent to our team and look forward to hearing from you. **Who we are supporting** The NATO Communication and Information Agency (NCIA) is responsible for providing secure and effective communications and information technology (IT)...

  • Cyber Security Senior Automation Specialist

    Il y a 5 mois

    Mons, Belgique Enterpryze Consulting Ltd. Temps plein

    **Cyber Security Senior Automation Specialist - **Working Location**:Mons, Belgium** - **Security Clearance**: NATO Secret** - **Language**:High proficiency level in English language **EXPERIENCE AND EDUCATION: **Essential Qualifications/Experience: - Expert knowledge and demonstrable experience in scripting, automation, playbook development, and...

  • Gd Analyst

    Il y a 5 mois

    Mons, Belgique Spektrum Temps plein

    Spektrum have a wide range of exciting opportunities in several global locations. We are always looking to add great new talent to our team and look forward to hearing from you. **Who we are supporting** The NATO Communication and Information Agency (NCIA) is responsible for providing secure and effective communications and information technology (IT)...

  • Intelligence Analyst

    Il y a 5 mois

    Mons, Belgique Spektrum Temps plein

    Spektrum have a wide range of exciting opportunities in several global locations. We are always looking to add great new talent to our team and look forward to hearing from you. **Who we are supporting** The NATO Communication and Information Agency (NCIA) is responsible for providing secure and effective communications and information technology (IT)...

  • First Line Security Event Analyst

    Il y a 7 mois

    Mons, Belgique Enterpryze Consulting Ltd. Temps plein

    **Working Location**:Mons, Belgium - **Security Clearance**:NATO Secret - **Language**:High proficiency level in English language **EXPERIENCE AND EDUCATION: **Essential Qualifications/Experience**: - Comprehensive knowledge of the principles of computer and communications security including knowledge of TCP/IP networking, Windows and Linux operating...

  • First Line Security Event Analyst

    Il y a 5 mois

    Mons, Belgique Vector Synergy Temps plein

    **Location**: Mons, Belgium **Security Clearance**: NATO Secret **Reference No**: C003187 / Mons **Skills, knowledge, experience required**: - The lack of a degree may be compensated by at least 3 years of relevant experience in field of cyber security analysis; - Experience in the following: - Security Information and Event Management products (SIEM) -...