Job Vacancy SOC Analyst L2/L3 and Incident Response
Brussels
Groupe Aptenia
Share this job
You detect, qualify and handle security incidents for end clients or a managed SOC. You are on the front line against threats, from alert triage to incident response, and you continuously improve detection capabilities.
Your responsibilities include: detecting, qualifying and handling security incidents, with the goal of protecting end clients or a managed SOC from threats. You monitor, triage and qualify alerts (SIEM, EDR, NDR, CTI). You lead investigations, including log analysis, event correlation and first-level forensics. You drive incident response through containment, eradication, recovery and lessons learned. You write incident reports and communications for the CISO and IT teams. You develop and tune detection rules and use cases (Sigma, KQL, SPL). You conduct threat hunting based on threat intelligence and the MITRE ATT&CK framework. You automate recurring tasks (SOAR, Python / PowerShell scripts). You write response playbooks and procedures. You take part in crisis exercises and simulations (purple team, tabletop).
Candidate profile
Must-have: 3+ years in a SOC, CSIRT or incident response role. Hands-on experience with at least one SIEM (Microsoft Sentinel, Splunk, QRadar, Elastic) and one EDR (Defender, CrowdStrike, SentinelOne). Solid knowledge of MITRE ATT&CK and common attack techniques (ransomware, phishing, lateral movement). Ability to analyze Windows, Linux, network and cloud logs. Composure and clear communication in crisis situations.
Nice-to-have: Certifications: GCIH, GCFA, GCIA, BTL1, SC-200, CySA+, OSDA. Scripting: Python, PowerShell, KQL. Experience in forensics (memory, disk) and first-level malware analysis. Cloud environments: Azure, AWS, Microsoft 365. Knowledge of the Belgian framework: CCB, CERT.be, NIS2.
Languages: Fluent English required; French or Dutch is a plus.
Working environment
What We Offer: engagements with end clients, with exposure to real incidents; SANS / GIAC certification and training budget; access to cutting-edge tools and environments; career progression to SOC Lead, Incident Response Manager, Threat Hunter or Security Architect.
Apply to this job!
Find your next career move from +10,000 jobs!
Manage your visibility
Salary, remote work... Define all the criteria that are important to you.
Get discovered
Recruiters come directly to look for their future hires in our CV library.
Join a community
Connect with like-minded tech and IT professionals on a daily basis through our forum.
SOC Analyst L2/L3 and Incident Response
Groupe Aptenia