Senior Engineer

Il y a 6 jours

Brussels, Belgique Proximus Temps plein
Freelancer OpportunityJob title: Senior Detection Engineer / Threat Detection LeadJob

location:
Brussels, Hybrid, 2 days/weekJob sector: Financial Services / Critical InfrastructureLevel: Senior / Lead (NL, EN, FR), leading people & projectsJob duration: 2 to 2027-02-28Job weekly hours: 40 hrs./weekJob salary range: 95 to 100 euros an hourThe following information aims to provide potential candidates with a better understanding of the requirements for this role.

About the Role
We are looking for an experienced security professional to lead our threat detection capabilities. This is a hands-on role with real ownership: you will design detections that actually catch attackers, drive our threat hunting programme, and be a go-to person for continuous security improvement. You will also have the opportunity to contribute to the broader security community and help build a team around you.
What You WillDoDesign, build, and maintain detection rules across SIEM and XDR platforms, with full lifecycle ownership from use case to retirementConduct gap analyses against threat actor TTPs (MITRE ATT&CK) to identify coverage blind spotsParticipate in and lead incident response efforts, including containment, investigation, and remediationRun purple team exercises and breach & attack simulations to validate detection coverageBuild and maintain a Detection-as-Code framework with CI/CD pipelines and version controlDevelop and execute threat hunting hypotheses based on threat intelligence and new attack researchTranslate threat intelligence feeds and reports into actionable detectionsSupport red team, TIBER, and DORA testing as the blue team counterpartContribute to incident response plan development and tabletop exercisesShare knowledge internally and represent the company in relevant industry groups (ISACs, CSIRTs, working groups)What We Are LookingForSeveral years of hands-on experience in detection engineering, SOC, or CSIRT rolesDeep familiarity with SIEM platforms (Sentinel, Splunk, QRadar, or similar)Experience building and running SOAR playbooks and automation pipelinesSolid understanding of attacker TTPs and how to operationalize threat intelligenceExperience with forensics, threat hunting, and incident handling at L2/L3 levelAbility to lead a team or a functional working groupActive participation in the security community is a strong differentiatorTrilingual candidate (NL, EN,FR).
Nice toHaveExperience in Government, defense, financial sector environments or critical infrastructureFamiliarity with OT/ICS securityPython scripting for automation and toolingInvolvement in inter-CSIRT coordination or security coalitionsCertifications: Microsoft Security, Threat Hunting, Threat intel, CISM,CISSPWhy This RoleThis role is built for someone who has grown from SOC analyst to detection leader, who reads detection engineering reports for fun, and who thinks in terms of attacker behavior rather than just alert rules. If you have run a CSIRT team at a major bank, contributed to a national cyber coalition, and spoken at FIRST, this is the kind of work you will find worth showing up for.
Apply now and start your journey with Team Possible We want to get to know you.
After your application, we will verify

your profile
and get back to you within 3working days.
If you're successful, you can expect the following steps:An initial conversation with our recruiter
- Swati KumariInterview with the Hiring Manager and the team.
FinaldecisionAboutProximusWe are Team Possible turning tech into opportunities.
We are driven by four core pillars:\ "I care,\" \"I make a difference,\ " \"I radically simplify,\" and\ "I embrace the future\". xsgtzvk This means you'll join a team that genuinely cares for customers and colleagues, is empowered to make a real impact, strives to radically simplify complex challenges, and is always looking ahead to embrace the future of technology. We believe in an inclusive and safe environment where everyone can thrive, offering extensive career development resources, including access to over 5,000 training modules and a minimum of 5 days of training per year, to help you continuously learn, grow, and tackle bold challenges with us.