Senior Threat Triage & PCAP Analyst

Wlgroup; Henegouwen; Sur place; EUR 70 000 - 95 000; Plein temps

Résumé du poste

Wlgroup in Mons, Belgium seeks a technical escalation point in a large defence security operations centre to validate first-line work, dig into unresolved investigations, and build detections that stop repeat incidents.

You will design and tune detections across Splunk, Sentinel and other tools, mentor analysts, and participate in purple-team exercises to strengthen monitoring and incident response.

Qualifications

• At least three years hands-on in a security operations centre or closely related monitoring environment.
• 1
• Real fluency extracting, normalising and interrogating raw log data from varied sources.

Responsabilités

• Reviewing and validating investigations, supporting first-line analysts so that alert closures, escalations, evidence and notes meet the standard.
• Acting as the technical escalation point for security monitoring: in-depth log analysis and threat triage across Splunk Enterprise Security, Splunk SOAR and Microsoft Sentinel.

Connaissances

Splunk

Microsoft Sentinel

Splunk SOAR

Kibana

Wireshark

tcpdump

Zeek

Threat detection

Log analysis

Incident reporting

On-call support

Automation

English proficiency

Formation

Bachelor's degree in a related discipline

CISSP

CISM

GIAC GCIH

GCFA

GSEC

CySA+

Outils

Splunk Enterprise Security

Splunk SOAR

Microsoft Sentinel

Elastic Kibana

Azure

AWS

Windows event logs

Linux syslog

Sysmon

Defender

CrowdStrike

Description du poste

Wlgroup in Mons, Belgium seeks a technical escalation point in a large defence security operations centre to validate first-line work, dig into unresolved investigations, and build detections that stop repeat incidents.

You will design and tune detections across Splunk, Sentinel and other tools, mentor analysts, and participate in purple-team exercises to strengthen monitoring and incident response.