Security Operations Center Analyst (H/F/X)

at  Leonardo Belgium

On behalf of a renowned space organization, Leonardo Belgium (LBe) is looking for multiple SOC professionals to carry out the constitution of a team that will have the unique and exciting opportunity to join a challenging and major European security project and contribute to the development of the Cyber & Security Division in the Space & International Agencies markets, fostering organization’s cyber resilience.
The working location will the Redu, Belgium, and full-time on site presence is required.

JOB DESCRIPTION

The main objective of the SOC team is:

• Security monitoring, in-depth incident analysis, and crisis management support
• Customer relations, including providing recommendations, continuous service improvement, and incident remediation support
• Continuous improvements, including the development of process/procedure manuals and participation in the improvement plan for service efficiency and detection rules

The SOC Analysts actively monitors security threats and risks involving customers’ infrastructure. They ensure that the problematic incidents and events are troubleshooted or escalated if needed. They can also respond to complex security issues and proactively look for threats that may have evaded the organization’s defenses.
Depending on their level, their main responsibilities will include :

Level 1:

• Continuous monitoring of the customers’ infrastructure to identify security incident
• Triaging security alerts
• Collecting data and context necessary to initiate Level 2 escalation
• Responding on security incidents
• Monitoring health of customer security sensors and SIEM infrastructure
• Delivering scheduled and ad-hoc reports
• Working closely with L2 and L3 Analysts towards the continuous improvement of the service

Level 2:

• Conducting in-depth analysis of security incidents to identify the full kill chain
• Executing risk hunting activities and conducting threat hunting exercises
• Undertaking forensic investigations and performing evaluations for L1 and L2 analysts
• Tracking incident detection and closure, and validating security incidents
• Generating new use cases for emerging threats and reviewing vulnerability assessment reports with clients
• Acting as a subject matter expert and expert witness when required

Level 3:

• Supporting L2 analyst responses to complex security issues
• Proactive hunting for threats that may have bypassed the organization’s defenses
• Discovering and relaying information about new vulnerabilities and emerging cybersecurity trends to the organization
• Implementing changes in cybersecurity policy based on the information discovered
• Leading the investigation and response to the most severe security incidents
• Providing guidance and mentorship to juniors Analysts
• Developing and refining the organization’s threat intelligence strategy

Please refer the Job description for details