Frontline Cyber Security Event Analyst (NATO)

EMW; Henegouwen; Sur place; EUR 60 000 - 75 000; Plein temps

Résumé du poste

EMW in Mons, Belgium seeks a First Line Security Event Analyst to perform initial analysis of logs and network traffic, determine alert severity, and present findings with remediation guidance. The role is 100% on-site at NATO Cyber Security Centre with a start date in November and end of December 2026.

The ideal candidate has a NATO SECRET clearance, a technical IT degree or equivalent experience, and strong knowledge of TCP/IP, Windows/Linux, SIEM, and network forensics.

Qualifications

• Active NATO SECRET clearance required.
• University degree in IT or 1–3 years cyber security analysis experience.
• Knowledge of TCP/IP networking and OS (Windows/Linux).
• Experience with SIEM and network security event analysis.
• Strong written and verbal communication skills.

Responsabilités

• Perform initial analysis of logs and network traffic and assess alert severity.
• Collate information and present findings with remediation recommendations.
• Support end-to-end incident handling and reporting.
• Utilise SIEM and packet capture tools to enhance investigations.
• Propose optimisations to improve NATO's cyber security posture.

Connaissances

NATO SECRET clearance

Security analysis

TCP/IP knowledge

Windows & Linux

Written communication

Team work

Independent work

Network forensics

Formation

University degree in IT or related field

Outils

SIEM (ArcSight, Splunk)

NIDS (SourceFire, Palo Alto)

Wireshark

Log analysis tools

Full Packet Capture systems

Description du poste

EMW in Mons, Belgium seeks a First Line Security Event Analyst to perform initial analysis of logs and network traffic, determine alert severity, and present findings with remediation guidance. The role is 100% on-site at NATO Cyber Security Centre with a start date in November and end of December 2026.

The ideal candidate has a NATO SECRET clearance, a technical IT degree or equivalent experience, and strong knowledge of TCP/IP, Windows/Linux, SIEM, and network forensics.