Cyber Vulnerability and Penetration Consultant

EKXEL IT Services & Financial Engineering; Brussel; On-site; EUR 70,000 - 110,000; Full time

Job summary

EKXEL IT Services & Financial Engineering is seeking a Senior Cyber Threat Information professional to aggregate, enrich and disseminate CTI for decision-making at client SOCs and CISOs. You will map adversary TTPs, align CTI with SOC and IR processes, and drive early warning capabilities within a dynamic telecom security environment.

You will lead multi-disciplinary efforts, coordinate with internal and external stakeholders, and contribute to monthly/quarterly CTI reports while advancing

Qualifications

• Masters degree and at least one ICT Security certification are required.
• In-depth knowledge of cybersecurity frameworks and emerging threats.
• 6+ years of professional relevant experience in cyber-defence/SOC/CSIRT.
• Experience leading security-related projects and coordinating with stakeholders.
• Experience with vulnerability scanning and penetration testing tools.
• Good understanding of SIEM methodologies and CTI frameworks.

Responsibilities

• Aggregate, transform, analyze, interpret or enrich cyber threat information for decision-making.
• Develop and disseminate CTI to clients' senior management and SOC.
• Design Threat-informed defence (TID) against vulnerabilities and threats.
• Map and track adversary TTPs using MITRE ATT&CK.
• Coordinate CTI with SOC and IR teams; aid early warning for cyber resilience.
• Plan coordination, training and awareness activities on the Cyber Threat Landscape.
• Maintain monthly and quarterly Cyber Threat Reports and related documents.

Skills

Cyber threat analysis

SOC operations

Team leadership

Stakeholder management

English proficiency

French language skills

Education

Masters degree

ICT Security certification

Tools

Nmap

Nessus

Metasploit

Kali Linux

SIEM

MISP

TAXII

STIX

Job description

Job Description

You will be aggregating, transforming, analysing, interpreting or enriching cyber threat information in order to provide the necessary context for decision-making processes;

Developing and disseminating impactful Cyber Threat Information (CTI) in the face of millions of indicators and alerts and delivering actionable cyber threat information to the client's senior management and the Cybersecurity Operations Centre (SOC).

• Design the basics of a Threat-informed defence (TID) against vulnerabilities to threats
• Design and implement the use of MITRE ATT&CK to Map and Track Adversary TTPs
• Design and implement steps to aligning the CTI with SOC and IR.
• Contribute to achieving early warning for cyber resilience with an actionable CTI.
• Planning of coordination, training and awareness activities related to the Cyber Threat Landscape (CTL);
• Proposal of practical solutions to improve the procedures and tools supporting the CTL activities.
• Support the Unit with updating core documents, which may include:
• Preparation and maintenance of Monthly and quarterly Cyber Threat Reports

Requirements

Profil recherché :

• What do you need to succeed in this position?
• A Masters degree and at least one ICT Security professional certification is also required.
• In-depth knowledge of methodologies, processes, tools and frameworks on cybersecurity, including the emerging threats
• 6 years of professional relevant experience, including:
• Operational and technical experience related to cyber-defence deployment/operation of a SOC, CSIRT, Security assessment platform or technical Security infrastructure (PKI, endpoint...); and
• Experience as a team leader or technical leader for major security-related projects in the Cyber Threat Landscape area.
• Proven experience with managing internal and external stakeholders in order to collect the relevant information on emerging cyber threat
• Experience with vulnerability scanning tools and techniques (e.g. Nmap, Nessus, Acunetix, Tripwire, Burp)
• With penetration testing using various tools (including Kali, metasploit)
• Good knowledge of Enterprise Risk Management, Cybersecurity & Cyberthreat Intelligence frameworks and tools: (MISP, TAXII, STIX)
• Good understanding of SIEM methodologies
• Good communication skills, ability to lead multi-lingual meetings and to do presentations to managers, technical staff and also end-users in the context of user awareness activities
• Leadership, autonomy and commitment to increasing maturity
• A fluency in the English language (both oral and written) is expected. French is an asset

Our Offer

A particularly attractive salary package, with many additional benefits, to attract the best of you. A professional and stimulating work environment in the field of telecommunications. Multiple career opportunities within a changing group, advanced training in new technologies, rich and recognized expertise. Your application will be treated with confidentiality. We would be very happy to organize a first appointment to talk to you about this opportunity and consider your next career development.