Cyber Security Analyst

Brayton Global; Brussel; On-site; EUR 70,000 - 110,000; Full time

Job summary

Brayton Global seeks a senior ICT Security leader to oversee the institution's IT infrastructure and security operations, designing secured architectures and driving security initiatives across cross‑functional teams.

The role requires 6+ years in cyber‑defence, hands‑on SOC/CSIRT experience, and strong leadership. Proficiency in English is mandatory; French is a plus. May require after‑hours involvement for critical incidents.

Qualifications

• Master's degree in ICT Security or related field.
• At least six years of professional experience in cyber-defence and security projects.
• Experience leading security investigations and security architecture design.

Responsibilities

• Protect IT infrastructure and applications by designing secured architectures.
• Run operational ICT Security processes and respond to incidents.
• Perform threat hunting and analyze results.
• Develop input for policies/standards/baselines writing.
• Provide technical support to project owners for security design.
• Lead security investigations and report findings to management.

Skills

Security leadership

Project management

Threat hunting

Incident response

Security architecture

Team leadership

Education

Master's degree in ICT Security or related field

ICT Security certification

Tools

Nmap

Nessus

Acunetix

Tripwire

Burp Suite

Kali Linux

Metasploit

MISP

TAXII

STIX

SIEM

Job description

This profile identifies a leader in the domain of operational and technical ICT Security who must have a strong ICT Security background, thorough knowledge and proven track record among a good mix of the competencies listed below:

Protection measures

• Operating systems and good practices for their configuration and protection;
• Endpoint security systems including: antivirus software, host intrusion detection and prevention, vulnerability assessment, data encryption, honey-pot, hardening practices, data protection;
• Network concepts and the associated security solutions. In particular: Internet/Intranet/Extranet architectures, authentication systems, Firewall, Proxies, Network IDS/IPS, PKI, e-mail gateways, IP security, Remote access control and violations;
• Identity and Access management;
• Data protection and integrity: encryption, data loss prevention mechanisms;
• Implementing and managing technical security architectures, systems and software.

Security Assurance

• Auditing and reviewing configuration of software, communication, computing systems and their architectures;
• Vulnerability scanning tools and techniques (e.g. Nmap, Nessus, Acunetix, Tripwire, Burp);
• Penetration testing using various tools (including Kali, metasploit);
• Continuous vulnerability follow-up and remediation, including establishing a constructive relationship with asset owners.

Security Monitoring

• Cyber-threat intelligence frameworks and tools (e.g. MISP, TAXII, STIX);
• Logs collection, centralization and management;
• Defining and implementing advanced systems in the domain of supervision of specific security elements and infrastructures (SIEM technologies);
• Monitoring policy configuration (IDS rules, detection and correlation rules and scripts).
• Handling complex incidents using incident management tools such as ticketing systems, wiki, knowledge base, reporting tools;
• Performing complex investigations of security events with the ability to keep a detailed track of the artefacts, actions, reports;
• Drafting regular reports, both at technical and management levels;
• Achieving complex technical analysis and investigations, involving memory, file system and forensic analyses;
• Performing suspicious files and malware analysis, using static and dynamic techniques and tools;
• Take part to red/blue team exercises.

Nature of the tasks:

This profile must have leadership, service and project management abilities, required flexibility to work on several tasks in parallel and be ready to perform and lead security investigations under short notice.

On European Parliament’s specific demand, this profile could be required to work outside normal working hours or days.

The main tasks required for this profile are:

• Protect the Institution’s IT infrastructure and applications:
  • Design and implement secured architectures;
  • Design and implement Security settings on various kinds of IT components;
  • Develop scripts and programs for a more efficient automation.
• Run the operational ICT Security processes:
  • Operate the corporate ICT Security solutions (e.g. endpoint protection suite, public key infrastructure, encryption solutions);
  • Operate the Security assurance platforms and tools;
  • Perform threat hunting activities (execute regular scripts, analyse results);
  • Detect, analyse Security events;
  • Respond to incidents and perform technical analysis tasks;
  • Perform all the required actions to re-establish as soon as possible the normal working conditions, liaise with internal and external stakeholders
  • Build and improve the cyber-defence capabilities.
• Support other ICT Security activities:
  • Provide technical support to Project owners for Security design;
  • Provide input for policies/standards/baselines writing;
  • Perform market analyses, set up labs/PoC for assessing and selecting appropriate technical solutions;
  • Contribute to technical presentations and demos for user awareness

Master. + At least one ICT Security professional certification is also required.

Professional experience

At least six years of professional relevant experience, including:

• three years’ operational and technical experience related to cyber-defence: deployment/operation of a SOC, CSIRT, Security assessment platform or technical Security infrastructure (PKI, endpoint...); and
• two years’ experience as a team leader or technical leader for major security-related projects.

Very good knowledge of both written and oral English (proficient user - C level, according to the Europass Language Passport classification) is mandatory. Good command of French is an asset.

Other specific expertise

The following additional administrative, technical and management competencies are required for this profile:

• Excellent organisational skills, ability to work with a minimum supervision and be committed to excellence and quality service delivery;
• Ability to generate reports and written analysis on complex and multi-domain security topics, both at high and technical levels;
• Be available for managing unplanned events and work under pressure, occasionally outside the normal working hours in case of severe security incidents;
• Good communication skills, ability to lead multi-lingual meetings and to do presentations to managers, technical staff and also end-users in the context of user awareness activities;
• Leadership, autonomy and commitment to increasing maturity;
• Excellent team player and ability to coordinate other experts' work.