Level 2/3 SOC Engineer

Rhox; Sint-Gillis; On-site; EUR 60,000 - 80,000; Full time

Job summary

Rhox is seeking a SOC engineer (Level 2/3) to perform threat hunting and incident response across cloud and on-premises environments in Belgium. You will investigate real-time alerts, hunt for threats in SIEM data, and propose measures to cut risk while documenting findings and security procedures.

Fluent English required, with Dutch and French at B2 level. The role emphasizes hands-on threat management, vulnerability awareness, and collaboration with IT teams to strengthen security controls

Qualifications

• Experience in security operations and threat hunting.
• Proficient in incident response and ITIL processes.
• Strong log analysis skills with SIEM (Splunk/Sentinel) expertise.
• Proficient written communication for security procedures.

Responsibilities

• Investigate real-time alerts and incidents following first-line triage.
• Hunt for threats and misconfigurations in SIEM data.
• Propose security measures to reduce risks.
• Document findings and write security procedures.

Skills

Threat hunting

Incident response

ITIL

English (B2)

Dutch (B2)

French (B2)

Tools

Splunk

Sentinel

Fortinet

Palo Alto

Tenable One

ServiceNow

Job description

We're looking for a SOC engineer for Level 2/3 threat hunting and incident response across cloud and on-premises networks and data systems.

What you'll do

• Investigate real-time alerts and incidents following first-line triage.
• Hunt for threats and misconfigurations in SIEM data.
• Propose security measures to reduce risks.
• Document findings and write security procedures.

What you bring

• Fortinet/Palo Alto firewalls.
• Incident management and ITIL.
• Security log analysis, SIEM (Splunk/Sentinel) and SOAR.
• Vulnerability management with Tenable One.
• Threat intelligence, pentesting, sandboxes and IPS/IDS.
• English (B2).
• Dutch (B2).
• French (B2).

Nice to have

• ServiceNow.