First Line Security Event Analyst
Il y a 2 heures
Hainaut, Wallonia, Belgique
Nova Hunte Ltd
Temps plein
Gratuit avec email ou Google
Enregistrez cette offre et organisez votre recherche
Créez un compte gratuit pour enregistrer des offres d'emploi, créer des alertes et revenir à cette liste depuis votre tableau de bord.
Gratuit avec email ou Google
En continuant, vous acceptez nos Conditions d’utilisation & Politique de confidentialité.
# First Line Security Event AnalystMons, Belgium ContractAre you a First Line Security Event Analyst with 3+ years of experience in cybersecurity monitoring and incident response? Apply now for a long-term contract opportunity with a leading client in Mons, Belgium.## Requirements
* 3+ years of cybersecurity analysis experience, OR degree in IT or related technical field plus 1 year of cybersecurity analysis experience
* Strong knowledge of TCP/IP networking, Windows and Linux operating systems, and computer and communications security principles
* Experience with SIEM tools (e.g. Splunk, ArcSight)
* Experience with Network Intrusion Detection Systems (NIDS) such as SourceFire or Palo Alto
* Log analysis experience across firewalls, proxies, routers, DNS, and security appliances
* Network traffic analysis using Wireshark
* Strong analytical, investigation, and problem-solving skills
* Strong knowledge of common cyber threats and mitigation techniques
* Good written and spoken communication skills
* Ability to work independently and as part of a team
* NATO Secret security clearance required
* (Desirable) Cybersecurity certifications such as GCIA, GNFA, or GCIH
* (Desirable) Experience with CERT/CIRT operations
* (Desirable) Experience with incident detection and response
* (Desirable) Experience with full packet capture tools (Niksun, RSA NetWitness)
* (Desirable) Experience with host-based intrusion detection (HIDS)
* (Desirable) Experience with vulnerability assessment and forensic tools
* (Desirable) Experience with military communication systems and networks
* Language(s): English (fluent)##
Job Description
* Monitor and perform first-line analysis of security alerts, logs, and network traffic
* Assess security events, determine severity, and escalate incidents when needed
* Investigate firewall, IDS, antivirus, and other security sensor alerts
* Use security tools (SIEM, log collection, packet capture, vulnerability assessment, network devices) to support investigations
* Support the full incident handling and response process
* Prepare clear reports with findings, recommendations, and remediation actions
* Suggest improvements to strengthen the organisation's cybersecurity posture
* 3+ years of cybersecurity analysis experience, OR degree in IT or related technical field plus 1 year of cybersecurity analysis experience
* Strong knowledge of TCP/IP networking, Windows and Linux operating systems, and computer and communications security principles
* Experience with SIEM tools (e.g. Splunk, ArcSight)
* Experience with Network Intrusion Detection Systems (NIDS) such as SourceFire or Palo Alto
* Log analysis experience across firewalls, proxies, routers, DNS, and security appliances
* Network traffic analysis using Wireshark
* Strong analytical, investigation, and problem-solving skills
* Strong knowledge of common cyber threats and mitigation techniques
* Good written and spoken communication skills
* Ability to work independently and as part of a team
* NATO Secret security clearance required
* (Desirable) Cybersecurity certifications such as GCIA, GNFA, or GCIH
* (Desirable) Experience with CERT/CIRT operations
* (Desirable) Experience with incident detection and response
* (Desirable) Experience with full packet capture tools (Niksun, RSA NetWitness)
* (Desirable) Experience with host-based intrusion detection (HIDS)
* (Desirable) Experience with vulnerability assessment and forensic tools
* (Desirable) Experience with military communication systems and networks
* Language(s): English (fluent)##
Job Description
* Monitor and perform first-line analysis of security alerts, logs, and network traffic
* Assess security events, determine severity, and escalate incidents when needed
* Investigate firewall, IDS, antivirus, and other security sensor alerts
* Use security tools (SIEM, log collection, packet capture, vulnerability assessment, network devices) to support investigations
* Support the full incident handling and response process
* Prepare clear reports with findings, recommendations, and remediation actions
* Suggest improvements to strengthen the organisation's cybersecurity posture