First Line Security Event Analyst

Il y a 2 heures

Hainaut, Wallonia, Belgique Nova Hunte Ltd Temps plein
# First Line Security Event AnalystMons, Belgium ContractAre you a First Line Security Event Analyst with 3+ years of experience in cybersecurity monitoring and incident response? Apply now for a long-term contract opportunity with a leading client in Mons, Belgium.## Requirements
* 3+ years of cybersecurity analysis experience, OR degree in IT or related technical field plus 1 year of cybersecurity analysis experience
* Strong knowledge of TCP/IP networking, Windows and Linux operating systems, and computer and communications security principles
* Experience with SIEM tools (e.g. Splunk, ArcSight)
* Experience with Network Intrusion Detection Systems (NIDS) such as SourceFire or Palo Alto
* Log analysis experience across firewalls, proxies, routers, DNS, and security appliances
* Network traffic analysis using Wireshark
* Strong analytical, investigation, and problem-solving skills
* Strong knowledge of common cyber threats and mitigation techniques
* Good written and spoken communication skills
* Ability to work independently and as part of a team
* NATO Secret security clearance required
* (Desirable) Cybersecurity certifications such as GCIA, GNFA, or GCIH
* (Desirable) Experience with CERT/CIRT operations
* (Desirable) Experience with incident detection and response
* (Desirable) Experience with full packet capture tools (Niksun, RSA NetWitness)
* (Desirable) Experience with host-based intrusion detection (HIDS)
* (Desirable) Experience with vulnerability assessment and forensic tools
* (Desirable) Experience with military communication systems and networks
* Language(s): English (fluent)##

Job Description
* Monitor and perform first-line analysis of security alerts, logs, and network traffic
* Assess security events, determine severity, and escalate incidents when needed
* Investigate firewall, IDS, antivirus, and other security sensor alerts
* Use security tools (SIEM, log collection, packet capture, vulnerability assessment, network devices) to support investigations
* Support the full incident handling and response process
* Prepare clear reports with findings, recommendations, and remediation actions
* Suggest improvements to strengthen the organisation's cybersecurity posture