Senior 1st Line Security Officer

Il y a 3 jours

BerchemAnderlecht, Belgique V-IT Cronos Temps plein

Project/Context situation

  • Within First Line IT Security, we are looking for a Medior IT Security Officer to strengthen Vulnerability Management and Cyber Defense activities.
  • The main focus is the daily triage, follow-up and reporting of vulnerabilities, performing risk assessments and supporting broader Cyber Defense activities.

Responsibilities

  • Daily triage and risk-based prioritization of vulnerabilities.
  • Follow up remediation actions with IT teams.
  • Monitor deadlines, overdue findings and remediation progress.
  • Prepare operational and management reporting.
  • Perform cybersecurity risk assessments and support risk acceptances.
  • Support security incident analysis and follow-up.
  • Monitor relevant threats and security advisories.
  • Contribute to security monitoring, hardening and Cyber Defense process improvements.
  • Coordinate with IT teams, Security Officers and external suppliers.

Technical Skills

  • Strong knowledge of Vulnerability Management, including triage, prioritization, remediation follow-up and reporting.
  • Experience with vulnerability-scanning tools such as Tenable, Qualys or equivalent.
  • Good understanding of CVE, CVSS, CWE, EPSS and CISA KEV.
  • Experience performing cybersecurity risk assessments and evaluating residual risk.
  • Knowledge of security incident triage, investigation and remediation.
  • Experience with Cyber Defense technologies such as SIEM, EDR/XDR and NDR.
  • Good understanding of infrastructure, network, endpoint, application and cloud security.
  • Knowledge of security hardening, patch management and CIS Benchmarks.
  • Experience with security reporting, KPI/KRI development and dashboarding.
  • Familiarity with NIST, ISO 27001/27002 and MITRE ATT&CK.

Non-Technical Skills

  • Strong analytical and problem-solving skills.
  • Good organizational and prioritization skills.
  • Strong ownership and accountability.
  • Clear communication with technical and non-technical stakeholders.
  • Effective stakeholder management and collaboration.
  • Ability to work independently and drive actions to completion.
  • Structured, pragmatic and detail-oriented working style.
  • Ability to remain calm and focused during critical vulnerabilities or security incidents.