Security Operations & Incident Response Specialist

Rhox; Namen; Hybride; EUR 65 000 - 95 000; Plein temps

Résumé du poste

Rhox, Belgium-based public-sector organisation, is strengthening its operational security team. The IT Cyber Security Specialist will work across a hybrid, multisite infrastructure focusing on network security and incident response, with tools including firewall, IDS/IPS, NDR, proxy, DNS, WAF and SIEM/XDR.

You will support security operations, analyze incidents, coordinate SOC and infrastructure teams, tune rules, investigate network flows, handle 24/7 on-call incidents, and ensure alignment

Qualifications

• Medior-level experience as incident responder/manager with incident analysis, escalation, coordination and resolution.

Responsabilités

• Resolve security incidents by analysing alerts, assessing impact, escalating appropriately and documenting actions.
• Coordinate SOC, infrastructure, network and application teams during incident response and remediation follow-up.
• Tune protection and detection rules across WAF, IDS/IPS, NDR and related tools to improve signal quality.
• Investigate network flows and correlate alerts from SIEM, XDR and other security controls to identify threats and risks.
• Control security exceptions and changes with impact assessment and clear change logs.
• Produce operational security reporting including incident reports, post-incident recommendations, NIS2 notifications, dashboards and KPI follow-up.

Connaissances

Incident response

Incident management

IPS/IDS/NDR tools

Firewall/DNS/Proxies/WAF

SOC/SIEM/XDR analysis

NIS2 compliance

Change management

Jira Service Management

Communication under pressure

Outils

SIEM/XDR platforms

WAF

IDS/IPS

Jira Service Management

Description du poste

Rhox, Belgium-based public-sector organisation, is strengthening its operational security team. The IT Cyber Security Specialist will work across a hybrid, multisite infrastructure focusing on network security and incident response, with tools including firewall, IDS/IPS, NDR, proxy, DNS, WAF and SIEM/XDR.

You will support security operations, analyze incidents, coordinate SOC and infrastructure teams, tune rules, investigate network flows, handle 24/7 on-call incidents, and ensure alignment