On-Site Second-Line Cyber Security Event Analyst

EMW, Inc.; Henegouwen; Sur place; EUR 60 000 - 90 000; Plein temps

Résumé du poste

EMW, Inc. in Mons, Belgium is seeking a Second Line Security Event Analyst to review investigations, validate evidence, and support 24×7 on‑call coverage within the CSOC.

You will analyze logs with Splunk Enterprise Security, Microsoft Sentinel and related tools to triage alerts and improve detection coverage. The role requires NATO SECRET clearance, a bachelor’s degree or equivalent, and at least three years in a SOC/CSOC.

Qualifications

• A NATO SECRET clearance is required.
• Bachelor’s degree or equivalent in a related field or demonstrated equivalent experience.
• Minimum three years in a SOC/CSOC or closely related cyber monitoring environment.
• Proven ability to analyze complex cyber incidents and produce actionable recommendations.

Responsabilités

• Review and validate investigations and support First-Line Analysts to ensure quality and compliance.
• Act as escalation point for cyber-security monitoring and perform in-depth log analysis using SIEM/EDR tools.
• Provide on-call support as part of a 24×7 roster for second-line escalations.
• Design, develop, test and maintain detection rules, alerts and analytics across security toolsets.
• Adjust logic, thresholds and mappings to reduce false positives and improve coverage.
• Write and update SOPs, run-books and knowledge-base articles.

Connaissances

NATO SECRET clearance

SOC operations

SIEM analysis

Alerting & detection

Mentoring teammates

Technical writing

English proficiency

Formation

Bachelor’s degree or equivalent

Outils

Splunk

Microsoft Sentinel

Azure

Elastic Kibana

EDR/XDR tools

Wireshark

tcpdump

Zeek

Description du poste

EMW, Inc. in Mons, Belgium is seeking a Second Line Security Event Analyst to review investigations, validate evidence, and support 24×7 on‑call coverage within the CSOC.

You will analyze logs with Splunk Enterprise Security, Microsoft Sentinel and related tools to triage alerts and improve detection coverage. The role requires NATO SECRET clearance, a bachelor’s degree or equivalent, and at least three years in a SOC/CSOC.