Second Line Security Event Analyst

il y a 14 heures


Mons, Belgique Enterpryze Consulting Ltd. Temps plein

**Second Line Security Event Analyst (SLSEA)
- **Working Location**:Mons, Belgium**
- **Security Clearance**: NATO Secret**
- **Language**:High proficiency level in English language

**EXPERIENCE AND EDUCATION:
**Essential Qualifications/Experience:
- Expert level in at least three of the following areas and a high level of experience in several of the other areas:
ü Security Incidents Event Management products (SIEM) - e.g. Splunk

ü Network Based Intrusion Detection Systems (NIDS) - e.g. SourceFire, Palo Alto Network Threat Prevention

ü Host Based Intrusion Detection Systems (HIDS)

ü Full Packet Capture systems - e.g. Niksun, RSA/NetWitness

ü A variety of Security Event generating sources (e.g. Firewalls, IDS, Routers, Security Appliances)

ü Computer incident response centre (CIRT), computer emergency response team (CERT)

ü Cloud-specific security tools

ü Splunk ES suite and Phantom SOAR
- Proficiency in Intrusion/Incident Detection and Handling
- Solid knowledge and experience in Splunk Enterprise Security suite. Exceptionally this requirement can be compensated with proven level of expertise in network analysis and threat hunting

**Desirable Qualifications/Experience**:

- Industry leading certification in the area of Cybersecurity, such as GCIA, GNFA, GCIH
- A good understanding of Security, Orchestrations, Automationand Response (SOAR) concepts and their benefits to the protection of CIS infrastructures
- A solid understanding of Information Security Practices relating to the Confidentiality, Integrity and Availability of information (CIA triad)
- Solid knowledge and experience in threat hunting in corporate/government level environment
- Strong knowledge of malware families and network attack vectors
- Knowledge and experience in analysis of various threat actor groups, attack patterns and tactics, techniques, and procedures (TTPs), deep analysis of threats across the enterprise by combining security rules, content, policy and relevant datasets
- Ability to analyse attack vectors against a particular system to determine attack surface
- Ability to produce contextual attack models applied to a scenario
- Hands on experience on monitoring cloud services

**DUTIES/ROLE**:

- Conduct detailed investigation and research of security events within NATO Cyber Security Centre (NCSC) team
- Analyse firewall, IDS, anti-virus and other sensor-produced system security events and present findings
- Provide detailed technical reports in support of incidents and capability improvements
- Share security event/incident information with stakeholders via presentations and technical reports
- Appropriately leverage the comprehensive extended toolset (e.g. Log Collection, Intrusion Detection, Packet Capture, VA, Network Devices etc.) to identify malicious activity. Be able to recommend improvements to enable enhancing investigations
- Propose possible optimisations and enhancements which help to maintain and improve NATO's Cyber Security posture
- Implement and support threat hunting activities; create use cases and technical reports when requested
- Analyse intelligence information gathered from internal and external threat intelligence resources
- Identify security gaps in NATO infrastructure and develop custom content utilising available toolset
- Provide expert investigative support of large scale and complex security incidents



  • Mons, Belgique MCR, LLC. Temps plein

    **Get an edge on advancing your career.** If you’re ready to meet complex challenges, we’re ready to meet you. MCR is a fast-growing global company headquartered in McLean, VA that supports defense and civilian agencies, NATO, and European ministries that face some of the most complex mission challenges in the world. If you are the best at what you do,...


  • Mons, Belgique Vector Synergy Temps plein

    **Location**: Mons, Belgium **Security Clearance**: NATO Secret **Reference No**: C003259 / Mons **Skills, knowledge, experience required**: - The lack of a degree may be compensated by at least 3 years of relevant experience in field of cyber security analysis; - Comprehensive knowledge of the principles of computer and communications security including...


  • Mons, Belgique Enterpryze Consulting Ltd. Temps plein

    **OVA Analyst-Cyber-Security Analyst** - **Working Location**:Mons, Belgium - **Security Clearance**:NATO Secret / **SC - **Language**:High proficiency level in English language **EXPERIENCE AND EDUCATION**: **Essential Qualifications/Experience**: - Expert level of knowledge in developing vulnerability assessment scans configurations for large networks,...


  • Mons, Belgique Systems Planning and Analysis, Inc. Temps plein

    Overview: - Systems Planning and Analysis, Inc. (SPA) is a well-established and progressive defense contracting company in the Northern Virginia area just a few miles south of the Pentagon. We are a professional services firm established in 1972 that has a long-standing reputation for unrivaled technical and analytical support to some of the top decision...


  • Mons, Belgique Vector Synergy Temps plein

    **Location**: Mons, Belgium **Security Clearance**: NATO Secret **Reference No**: RFQ C004303 / Mons **Skills, knowledge, experience required**: - Minimum 1 year experience in Service Desk Operations within the last 2 years; - Knowledge of and experience in NATO environment; - Experience in, installation, maintenance and troubleshooting of MS Windows 10, MS...


  • Mons, Belgique Vector Synergy Temps plein

    CYBER SECURITY FIREWALL Support 2 **Location**: Mons, Belgium **Security Clearance**: NATO Cosmic Top Secret **Reference No**: 2025-0116/ Mons **Skills, knowledge, experience required**: - Bachelor's degree in Computer Science, Information Technology, or related field or equivalent experience; - Minimum qualifications required: - Official firewall...

  • IT Security Specialist

    il y a 2 semaines


    Mons, Belgique Uni Systems Temps plein

    At Uni Systems, we are working towards turning digital visions into reality. We are continuously growing and we are looking for an IT Security Specialist to join our UniQue team.What will you be doing in this role? Act as one of the engineers and Subject Matter Expert (SME) for SIEM and Log Collection services within the Cyber Security Data team. Support in...


  • Mons, Belgique Enterpryze Consulting Ltd. Temps plein

    **EXPERIENCE AND EDUCATION**: **Essential Qualifications/Experience**: - Bachelor's degree in Computer Science, Information Technology, or related field Or equivalent experience. - Minimum qualifications required - Official firewall certification (such as PCNSA,) - Official Network Management certification (such as Network+) - Official Service Management...


  • Mons, Belgique Enterpryze Consulting Ltd. Temps plein

    **Working Location**:Mons, Belgium - **Security Clearance**:NATO Secret / **SC - **Language**:High proficiency level in English language **EXPERIENCE AND EDUCATION**: **Essential Qualifications/Experience**: - Recent practical, hands-on experience of Intrusion Detection and Incident Response (TRIAGE, Contain, Eradicate, Recover) in an enterprise-level...

  • Ova Analyst

    il y a 2 semaines


    Mons, Belgique Systems Planning and Analysis, Inc. Temps plein

    Overview: Systems Planning and Analysis, Inc. (SPA) is a well-established and progressive defense contracting company in the Northern Virginia area just a few miles south of the Pentagon. We are a professional services firm established in 1972 that has a long-standing reputation for unrivaled technical and analytical support to some of the top decision...