Cyber Vulnerability and Penetration Consultant

EKXEL IT Services & Financial Engineering; Brussel; Sur place; EUR 70 000 - 110 000; Plein temps

Avantages offerts par ce poste

Attractive salary package

Professional work environment

Advanced training in new technologies

Résumé du poste

EKXEL IT Services & Financial Engineering is seeking a senior Cyber Threat Information professional to aggregate, transform, and enrich CTI to support decision‑making for the SOC and senior management.

You will map adversary TTPs with MITRE ATT&CK, lead CTI initiatives, coordinate with stakeholders, and develop monthly and quarterly CTI reports while advancing cyber resilience.

Qualifications

• Masters degree and at least one ICT Security certification.
• In-depth knowledge of methodologies, processes, tools and frameworks on cybersecurity.
• 6 years of professional relevant experience in cyber-defence deployment/operation.
• Experience as a team/technical leader for major security projects.
• Proven experience with managing internal and external stakeholders to collect information on threats.
• Experience with vulnerability scanning tools and penetration testing.
• Knowledge of SIEM, MITRE ATT&CK, CTI and related frameworks.
• Strong communication and presentation skills; able to lead multilingual meetings.

Responsabilités

• Aggregate, transform, analyse, interpret or enrich cyber threat information for decision‑making processes.
• Develop and disseminate actionable CTI to senior management and the SOC.
• Design the basics of a Threat‑informed defence (TID) against vulnerabilities.
• Map and track adversary TTPs using MITRE ATT&CK.
• Align CTI with SOC and IR processes.
• Contribute to early warning for cyber resilience with actionable CTI.
• Coordinate CTI training and awareness activities; update core CTI documents.

Connaissances

Threat intelligence

Cybersecurity leadership

Stakeholder management

English fluency

French a plus

Formation

Masters degree in ICT Security or related field

ICT Security certification (e.g., CISSP/CISM)

Outils

Nmap

Nessus

Acunetix

Tripwire

Burp Suite

Kali Linux

Metasploit

MISP

TAXII

STIX

Description du poste

Job Description:

You will be aggregating, transforming, analysing, interpreting or enriching cyber threat information in order to provide the necessary context for decision‑making processes;

Developing and disseminating impactful Cyber Threat Information (CTI) in the face of millions of indicators and alerts and delivering actionable cyber threat information to the client's senior management and the Cybersecurity Operations Centre (SOC).

• Design the basics of a Threat-informed defence (TID) against vulnerabilities to threats


• Design and implement the use of MITRE ATT&CK to Map and Track Adversary TTPs


• Design and implement steps to aligning the CTI with SOC and IR.


• Contribute to achieving early warning for cyber resilience with an actionable CTI.


• Planning of coordination, training and awareness activities related to the Cyber Threat Landscape (CTL);


• Proposal of practical solutions to improve the procedures and tools supporting the CTL activities.


• Support the Unit with updating core documents, which may include:


• Preparation and maintenance of Monthly and quarterly Cyber Threat Reports

Requirements

• What do you need to succeed in this position?


• A Masters degree and at least one ICT Security professional certification is also required.


• In-depth knowledge of methodologies, processes, tools and frameworks on cybersecurity, including the emerging threats


• 6 years of professional relevant experience, including:


• Operational and technical experience related to cyber-defence deployment/operation of a SOC, CSIRT, Security assessment platform or technical Security infrastructure (PKI, endpoint...); and


• Experience as a team leader or technical leader for major security-related projects in the Cyber Threat Landscape area.


• Proven experience with managing internal and external stakeholders in order to collect the relevant information on emerging cyber threat


• Experience with vulnerability scanning tools and techniques (e.g. Nmap, Nessus, Acunetix, Tripwire, Burp)


• With penetration testing using various tools (including Kali, metasploit)


• Good knowledge of Enterprise Risk Management, Cybersecurity & Cyberthreat Intelligence frameworks and tools: (MISP, TAXII, STIX)


• Good understanding of SIEM methodologies


• Good communication skills, ability to lead multi‑lingual meetings and to do presentations to managers, technical staff and also end-users in the context of user awareness activities


• Leadership, autonomy and commitment to increasing maturity


• A fluency in the English language (both oral and written) is expected. French is an asset

Our offer:

A particularly attractive salary package, with many additional benefits, to attract the best of you. A professional and stimulating work environment in the field of telecommunications. Multiple career opportunities within a changing group, advanced training in new technologies, rich and recognized expertise. Your application will be treated with confidentiality. We would be very happy to organize a first appointment to talk to you about this opportunity and consider your next career development.