First-Line Security Event Analyst: Rapid Threat Triage

McBride International; Henegouwen; Sur place; EUR 45 000 - 65 000; Plein temps

Résumé du poste

McBride International is seeking a First Line Security Event Analyst for NATO Communications and Information Agency in Belgium. This role involves analyzing security events, assessing alerts, and providing remediation recommendations. Candidates should possess a university degree in a technical subject and have relevant experience in cyber security analysis.

The successful candidate will support incident handling, conduct security assessments, and present findings clearly. Experience with SIEM products like Splunk and knowledge of networking principles are essential for this position.

Qualifications

• A university degree in a technical subject focused on IT, or equivalent experience.
• Experience in cyber security analysis with knowledge of common network security threats.
• Comprehensive knowledge of computer and communications security principles.

Responsabilités

• Perform initial analysis of logs and network traffic, determine alert severity.
• Conduct research and assessments of security events within NATO Cyber Security Centre.
• Support the end-to-end Incident Handling process.

Connaissances

Cyber security analysis

TCP/IP networking

Windows operating systems

Linux operating systems

Security Information and Event Management (SIEM)

Log analysis

Network traffic capture analysis with Wireshark

Good written and spoken communication skills

Formation

University degree in IT or related field

Outils

Splunk

FirePower

Palo Alto Network Threat Prevention

Wireshark

Description du poste

McBride International is seeking a First Line Security Event Analyst for NATO Communications and Information Agency in Belgium. This role involves analyzing security events, assessing alerts, and providing remediation recommendations. Candidates should possess a university degree in a technical subject and have relevant experience in cyber security analysis.

The successful candidate will support incident handling, conduct security assessments, and present findings clearly. Experience with SIEM products like Splunk and knowledge of networking principles are essential for this position.