Defensive Security Consultant

Il y a 1 heure

Arrondissement of BrusselsCapital, Brussels, Belgique Crimson7 Temps plein
pWe're looking for a Defensive Security Consultant to help clients improve how they detect, investigate, and respond to adversary activity. You'll combine hands-on detection engineering with practical guidance, working alongside Crimson7's offensive and defensive practitioners to make security capabilities more effective in real environments. /ph3Responsibilities /h3ulliAssess client detection and response capabilities, then help define practical improvements /liliDevelop and tune detection rules and hunting queries for SIEM and EDR platforms /liliValidate detections against realistic attack simulations and relevant adversary techniques /liliWork with red team operators, SOC teams, and client stakeholders to investigate coverage gaps /liliSupport detection-as-code practices and help clients operationalize improvements /liliExplain findings and recommendations clearly to technical teams and decision-makers /li /ulh3Requirements /h3ulliExperience in detection engineering, threat hunting, incident response, or security operations /liliHands-on experience with at least one SIEM or EDR platform, such as Microsoft Sentinel, Splunk, or Elastic /liliExperience writing or tuning detection logic and investigation queries, such as Sigma, KQL, or SPL /liliUnderstanding of common attack techniques and the MITRE ATTCK framework /liliFamiliarity with endpoint, identity, network, or cloud telemetry /liliStrong communication skills and a practical, collaborative approach to client work /li /ulh3Nice to Have /h3ulliExperience with detection-as-code or CI/CD workflows for security content /liliPurple team, threat hunting, or incident response experience /liliScripting skills in Python or PowerShell /liliExperience with cloud security telemetry or identity environments /liliOffensive security background /li /ulh3What

We Offer
/h3ulliWork across offensive and defensive security engagements /liliCollaborate with red team operators and client security teams /liliCompetitive salary and benefits /liliFlexible working arrangements /liliContinuous learning and development opportunities /li /ul