Senior SOC Analyst – Onsite MDR Expert (Brussels)

Integrity360; Oudergem; Sur place; EUR 70 000 - 90 000; Plein temps

Résumé du poste

Integrity360 is looking for a Level 3 SOC Analyst to join our Brussels MDR team onsite. You will be the escalation point for complex investigations and guide Level 2 analysts, working closely with clients to strengthen security monitoring.

You will bring deep operational knowledge of SIEM/EDR, threat hunting, and ATT&CK-based detection, delivering technical reports and helping to improve detection logic and playbooks in a fast-paced SOC.

Qualifications

• 5+ years in cyber security, SOC/MDR environment preferred.
• Proven experience handling complex security incidents and investigations.
• Strong understanding of SIEM/EDR/NIDS/SOAR/DLP and threat detection.
• Experience with ATT&CK-based detection and incident response.
• Ability to communicate technical findings to technical and non-technical stakeholders.

Responsabilités

• Act as Level 3 escalation point for advanced, complex investigations.
• Support Level 2 analysts with technical guidance during investigations.
• Perform in-depth analysis of security events, logs and network data.
• Lead investigations: scoping, containment and remediation recommendations.
• Develop and review detection use cases, rules and incident playbooks.
• Prepare technical reports and present findings to customers and internal teams.

Connaissances

Security operations MDR

SIEM/EDR/NIDS/SOAR/DLP

Investigation triage

MITRE ATT&CK

KQL/SPL/Sigma

Threat hunting

Incident response

Technical reporting

Customer communication

Outils

Microsoft Sentinel

Microsoft Defender

Splunk

QRadar

CrowdStrike

Palo Alto

Suricata

Zeek

Snort

Description du poste

Integrity360 is looking for a Level 3 SOC Analyst to join our Brussels MDR team onsite. You will be the escalation point for complex investigations and guide Level 2 analysts, working closely with clients to strengthen security monitoring.

You will bring deep operational knowledge of SIEM/EDR, threat hunting, and ATT&CK-based detection, delivering technical reports and helping to improve detection logic and playbooks in a fast-paced SOC.