Analyste JP054979

We are looking for an experienced Medior Security Operations Analyst to join a public-sector organisation in Brussels. In this role, you will be responsible for monitoring, analysing and responding to cybersecurity events and incidents, while contributing to the continuous improvement of the organisation’s security operations and Microsoft security environment., * Identify, analyse and qualify security events from SIEM and EDR solutions.

• Assess the severity of security incidents and manage notification, follow-up and escalation.
• Support incident investigation, remediation and risk mitigation activities.
• Recommend immediate and long-term corrective security measures.
• Contribute to the definition of the strategy for collecting and managing security events.
• Improve procedures for monitoring threats, vulnerabilities and cyberattacks.

• Participate in security initiatives such as:

• Data classification
• Account security
• Data Loss Prevention (DLP)
• Act as a key point of contact for Microsoft Purview, including design, evolution and day-to-day management.
• Work with Microsoft 365 / Office 365 and ServiceNow.
• Contribute to improving security detection, response and automation capabilities.

We are looking for a Security Analyst with relevant experience in:

• SIEM / EDR security monitoring and incident response
• Security incident investigation, escalation and remediation
• Threat and vulnerability monitoring
• Microsoft Purview
• Microsoft Entra ID
• Active Directory
• Microsoft 365 / Office 365
• Data classification and protection
• MDM and MAM policies
• Microsoft Intune
• Azure fundamentals
• PowerShell scripting and automation
• Windows Server management
• SharePoint
• ServiceNow

Desired Certifications The following certifications are an advantage:

• Microsoft SC-900
• Microsoft SC-500
• CyberArk Certified Trustee, * Strong analytical and problem-solving skills.
• Ability to investigate and respond effectively to security incidents.
• Experience improving security platforms such as Microsoft Defender or equivalent solutions.
• Experience automating detection or incident response processes.
• Knowledge of vulnerability management and attack surface reduction.
• Ability to explain technical security concepts clearly to non-technical stakeholders.
• Strong communication and stakeholder-management skills.

This is an excellent opportunity for a Security Operations Analyst with hands-on experience in SOC operations, SIEM, EDR, incident response, Microsoft security, Purview, Entra ID and data protection.