Senior SOC Detection Engineer — Splunk & Sentinel

WLG; Henegouwen; Sur place; EUR 70 000 - 110 000; Plein temps

Résumé du poste

WLG in Mons, Belgium is seeking a technical escalation point for a large defence security operations centre. You will validate investigations, perform deep log analysis, and design detections across Splunk, Sentinel and other security tools.

The role includes on‑call duties, mentoring, and collaboration with threat hunting to improve coverage and reduce false positives. Strong English and a related degree are required.

Qualifications

• Minimum three years in an SOC or related monitoring environment.
• Proven incident investigations, with clear, actionable recommendations.
• Fluent log extraction and interrogation from varied sources (Windows, Linux, etc.).
• Experience turning attacker techniques into working detections.
• Strong written and spoken English; professional communication under pressure.

Responsabilités

• Validate investigations, ensure closures, evidence and notes meet standards.
• Perform in-depth log analysis and triage across Splunk, Sentinel, and SIEMs.
• Provide on-call cover on a 24x7 roster for escalations.
• Design, test and maintain detections, alerts, and analytics across tools.
• Mentor junior analysts with feedback and coaching.
• Collaborate with threat hunting to automate detections where possible.
• Produce operational docs, run-books, and knowledge-base articles.
• Support project planning and secure integration of detections into live environments.

Connaissances

SOC analysis

Incident response

Log analysis

Threat hunting

Detection engineering

Automation

Formation

Bachelor's degree in a related discipline

Outils

Splunk

Microsoft Sentinel

Elastic Kibana

Wireshark

tcpdump

Zeek

Description du poste

WLG in Mons, Belgium is seeking a technical escalation point for a large defence security operations centre. You will validate investigations, perform deep log analysis, and design detections across Splunk, Sentinel and other security tools.

The role includes on‑call duties, mentoring, and collaboration with threat hunting to improve coverage and reduce false positives. Strong English and a related degree are required.