Senior Threat Triage & PCAP Detection Lead

WLG; Henegouwen; Sur place; EUR 70 000 - 100 000; Plein temps

Résumé du poste

WLG is seeking a technical escalation point in a large defence security operations centre in Mons, Belgium. You will validate investigations, build detections, and ensure high-quality incident handling across monitoring tools.

You will design, test and maintain detections, provide coaching to analysts, and contribute to operational documentation and process improvements. This role requires hands-on SOC experience and strong English communication.

Qualifications

• Hands-on in a security operations centre or closely related monitoring environment.

Responsabilités

• Reviewing and validating investigations to ensure closures are complete and procedurally sound.
• Acting as the technical escalation point for security monitoring and deciding what goes to incident handling.
• Providing 24x7 on-call cover for escalations.
• Designing, developing and maintaining detections and analytics across monitoring tools.
• Giving feedback and coaching to first-line analysts.
• Supporting or mentoring less experienced analysts.
• Automating repetitive tasks to improve workflow efficiency.
• Writing and updating operational documentation and run-books.
• Representing the monitoring function in project planning and transition.

Connaissances

SOC experience

Threat analysis

Incident reporting

Mentoring

Automation

Communication

English proficiency

Formation

Bachelor's degree in a related discipline

CISSP / CISM / GIAC / CompTIA CySA+

Outils

Splunk Enterprise Security

Splunk SOAR

Microsoft Sentinel

Elastic Kibana

Wireshark

tcpdump

Zeek

Windows Event Logs

Linux Syslog

Description du poste

WLG is seeking a technical escalation point in a large defence security operations centre in Mons, Belgium. You will validate investigations, build detections, and ensure high-quality incident handling across monitoring tools.

You will design, test and maintain detections, provide coaching to analysts, and contribute to operational documentation and process improvements. This role requires hands-on SOC experience and strong English communication.