Network Security Monitoring Platform Lead

Work Life Group; Henegouwen; On-site; EUR 65,000 - 90,000; Full time

Job summary

Work Life Group in Mons, Belgium, is looking for a security operations specialist to own its security monitoring, traffic aggregation and packet capture platforms across multiple sites and data centres. The role is based in a multinational defence environment.

You will deploy, upgrade and decommission monitoring tools, tune data collection for completeness, troubleshoot Linux and network issues, and collaborate with analysts to ensure coverage keeps pace with threats.

Qualifications

• Expert knowledge of network security monitoring and cyber defence operations.
• Hands-on experience with large, distributed monitoring across many sites.
• Experience with Firepower, Corelight and NetWitness.
• Strong packet capture and network visibility expertise.
• Linux troubleshooting down to packet flow.
• Cyberscurity certification such as CISM, CISSP or GIAC.
• Degree with two years' experience or six years progressive experience.
• Fluent professional English.

Responsibilities

• Own network visibility and security monitoring capabilities.
• Manage full lifecycle of platforms: deployment, upgrades, obsolescence, decommissioning.
• Tune monitoring, aggregation and packet capture to ensure complete data.
• Monitor platform health, data quality, retention and storage.
• Troubleshoot Linux, network and data collection problems.
• Collaborate with analysts and detection engineers to maintain coverage.
• Support capacity planning, site surveys and cyber defence exercises.

Skills

Network security monitoring

Cyber defence operations

Large distributed monitoring

Linux troubleshooting

Network troubleshooting

Packet capture

English fluency

Education

CISM/CISSP/GIAC certification

Relevant degree + 2 years experience or 6 years progressive experience

Tools

Firepower

Corelight

NetWitness

Packet broker

Job description

Work Life Group in Mons, Belgium, is looking for a security operations specialist to own its security monitoring, traffic aggregation and packet capture platforms across multiple sites and data centres. The role is based in a multinational defence environment.

You will deploy, upgrade and decommission monitoring tools, tune data collection for completeness, troubleshoot Linux and network issues, and collaborate with analysts to ensure coverage keeps pace with threats.