IT Security Analyst

Xintas; Antwerpen; On-site; EUR 70,000 - 100,000; Full time

Job summary

Argenta's central IT Security team is seeking an IT Security Analyst to protect our critical IT and cloud environments against cyber threats. You will participate in on-call rotation and act as the primary contact during serious security incidents, collaborating with IT Operations, Architecture, the CISO Office and external partners.

Responsibilities include cybersecurity analysis, detection, incident response, risk assessments and leveraging Microsoft Defender and Azure security controls.

Responsibilities

• Analyze alerts, anomalies and suspicious activity.
• Develop defence strategies based on secure by design and zero trust principles.
• Produce security risk and threat reports for technical and management stakeholders.
• Implement and monitor preventive security controls.
• Apply information security standards and frameworks, including ISO, NIST and CIS.
• Develop, maintain and test incident response playbooks.
• Actively manage security incidents.
• Report on incidents to technical and non-technical audiences.
• Coordinate activities during security crises and escalations.
• Perform or oversee containment and eradication activities, forensic investigations and post-incident root cause analysis.
• Collaborate with internal and external parties, including SOC teams, vendors, auditors and CERTs.
• Support and follow up on penetration testing and vulnerability management.
• Actively contribute to knowledge sharing and documentation within the security team.
• Conduct threat hunting based on real-world threats and relevant threat intelligence.
• Participate in or support red and blue team exercises.
• Continuously improve detection systems, incident response processes, reporting and metrics.

Job description

As an IT Security Analyst, you will be part of a central IT Security team within Argenta. You will play an active role in protecting our critical IT and cloud environments against cyber threats.

An important part of this role is participation in the IT Security on-call rotation:

On-call duty on a rotating basis, approximately one week every 3 to 4 weeks

Each on-call period runs from Monday morning to Monday morning (7 consecutive days)

During this period, you may be called upon to handle incidents, including Priority 1 security incidents

You will act as the primary point of contact for technical analysis and response during serious security incidents, working autonomously

You must be able to analyse situations, make decisions and take action independently

You will work closely with IT Operations, Architecture, the CISO Office and external partners.

Cybersecurity Analysis & Detection

• Analyse alerts, anomalies and suspicious activity
• Develop defence strategies based on secure by design and zero trust principles
• Produce security risk and threat reports for both technical and management stakeholders
• Implement and monitor preventive security controls
• Apply information security standards and frameworks, including ISO, NIST and CIS

Incident Response & Crisis Management

• Develop, maintain and test incident response playbooks
• Actively manage security incidents
• Report on incidents to technical and non-technical audiences
• Coordinate activities during security crises and escalations
• Perform or oversee containment and eradication activities, forensic investigations and post-incident root cause analysis
• Collaborate with internal and external parties, including SOC teams, vendors, auditors and CERTs
• Support and follow up on penetration testing and vulnerability management
• Actively contribute to knowledge sharing and documentation within the security team
• Conduct threat hunting based on real-world threats and relevant threat intelligence
• Participate in or support red and blue team exercises
• Continuously improve detection systems, incident response processes, reporting and metrics

Security Risk Assessment

• Conduct security maturity assessments, covering both technical and organisational aspects
• Develop and maintain technical security roadmaps
• Support risk-based decision-making by IT Architecture and management
• Identify and assess risks using structured methodologies, such as STRIDE
• Translate technical risks into clear business impacts for non-technical stakeholders

Microsoft Security Tools

• Use and optimise Microsoft security platforms on a daily basis, including Microsoft Defender solutions (Endpoint, Identity, Cloud, CASB, DLP, etc.) and Azure security controls
• Integrate logs, alerts and response workflows
• Automate wherever possible, including playbooks, use cases and response workflows